2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20268 | HIGH | 7.7 | 0.6% | Oct 23, 2024 | A vulnerability in the Simple Network Management Protocol (SNMP) feature of Cisco Adaptive Security Appliance (ASA) Soft... |
| CVE-2024-20264 | MEDIUM | 5.4 | 0.4% | Oct 23, 2024 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an... |
| CVE-2024-20260 | HIGH | 8.6 | 0.6% | Oct 23, 2024 | Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Vir... |
| CVE-2024-10296 | HIGH | 7.2 | 0.4% | Oct 23, 2024 | A vulnerability was found in PHPGurukul Medical Card Generation System 1.0. It has been declared as critical. Affected b... |
| CVE-2024-49751 | LOW | 1.2 | 0.5% | Oct 23, 2024 | Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-... |
| CVE-2024-49701 | HIGH | 8.8 | 0.5% | Oct 23, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-49690 | HIGH | 8.8 | 0.5% | Oct 23, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-49684 | HIGH | 7.2 | 0.5% | Oct 23, 2024 | Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows ... |
| CVE-2024-49676 | MEDIUM | 6.6 | 0.3% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Michael Bourne Custom Icons for Elementor custom-icons-... |
| CVE-2024-49671 | CRITICAL | 9.9 | 0.5% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Dogu Pekgoz AI Image Generator for Your Content & Featu... |
| CVE-2024-49669 | CRITICAL | 9.9 | 0.5% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Alexander De Ridder INK Official ink-official allows Up... |
| CVE-2024-49668 | CRITICAL | 10 | 1.5% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows ... |
| CVE-2024-49658 | CRITICAL | 9.9 | 0.5% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in ecomerciar Woocommerce Custom Profile Picture woo-custo... |
| CVE-2024-49657 | HIGH | 7.7 | 0.4% | Oct 23, 2024 | Missing Authorization vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-progress allows Exploiting ... |
| CVE-2024-49653 | CRITICAL | 9.9 | 1.2% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web ... |
| CVE-2024-49652 | CRITICAL | 9.9 | 0.5% | Oct 23, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Renata Bracichowicz 3D Work In Progress renee-work-in-p... |
| CVE-2024-30124 | MEDIUM | 4 | 0.2% | Oct 23, 2024 | HCL Sametime is impacted by insecure services in-use on the UIM client by default. An unused legacy REST service was ena... |
| CVE-2024-10293 | CRITICAL | 9.8 | 0.5% | Oct 23, 2024 | A vulnerability was found in ZZCMS 2023. It has been classified as critical. Affected is the function Ebak_SetGotoPak of... |
| CVE-2024-10292 | CRITICAL | 9.8 | 0.5% | Oct 23, 2024 | A vulnerability was found in ZZCMS 2023 and classified as critical. This issue affects some unknown processing of the fi... |
| CVE-2024-10291 | CRITICAL | 9.8 | 0.5% | Oct 23, 2024 | A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function Ebak_Do... |
| CVE-2024-5764 | MEDIUM | 6.5 | 0.4% | Oct 23, 2024 | Use of Hard-coded Credentials vulnerability in Sonatype Nexus Repository has been discovered in the code responsible for... |
| CVE-2024-49675 | HIGH | 8.8 | 0.5% | Oct 23, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Vitalii iBryl Switch User ibryl-switch-user al... |
| CVE-2024-49370 | MEDIUM | 4.9 | 0.5% | Oct 23, 2024 | Pimcore is an open source data and experience management platform. When a PortalUserObject is connected to a PimcoreUser... |
| CVE-2024-47904 | HIGH | 8.5 | 0.2% | Oct 23, 2024 | A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir... |
| CVE-2024-47903 | CRITICAL | 9.1 | 0.4% | Oct 23, 2024 | A vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2.12), InterMesh 7707 Fir... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now