2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9583 | MEDIUM | 5.4 | 0.4% | Oct 23, 2024 | The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauth... |
| CVE-2024-9829 | MEDIUM | 6.5 | 0.4% | Oct 23, 2024 | The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks... |
| CVE-2024-50066 | HIGH | 7 | 0.2% | Oct 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables ... |
| CVE-2024-9927 | HIGH | 7.2 | 0.5% | Oct 23, 2024 | The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all vers... |
| CVE-2024-31880 | MEDIUM | 6.5 | 0.4% | Oct 23, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv... |
| CVE-2024-7587 | HIGH | 7.8 | 0.2% | Oct 22, 2024 | Incorrect Default Permissions vulnerability in GenBroker32, which is included in the installers for Mitsubishi Electric ... |
| CVE-2024-48657 | HIGH | 7.2 | 0.9% | Oct 22, 2024 | SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to ex... |
| CVE-2024-48656 | MEDIUM | 4.8 | 0.4% | Oct 22, 2024 | Cross Site Scripting vulnerability in student management system in php with source code v.1.0.0 allows a remote attacker... |
| CVE-2024-48652 | MEDIUM | 4.8 | 1.0% | Oct 22, 2024 | Cross Site Scripting vulnerability in camaleon-cms v.2.7.5 allows remote attacker to execute arbitrary code via the cont... |
| CVE-2024-48644 | MEDIUM | 5.3 | 0.7% | Oct 22, 2024 | Accounts enumeration vulnerability in the Login Component of Reolink Duo 2 WiFi Camera (Firmware Version v3.0.0.1889_230... |
| CVE-2024-48415 | MEDIUM | 5 | 0.4% | Oct 22, 2024 | itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastna... |
| CVE-2024-46914 | — | — | — | Oct 22, 2024 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and... |
| CVE-2024-46483 | CRITICAL | 9.8 | 1.1% | Oct 22, 2024 | Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which c... |
| CVE-2024-46482 | HIGH | 8.2 | 0.3% | Oct 22, 2024 | An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 ... |
| CVE-2024-44812 | CRITICAL | 9.8 | 1.2% | Oct 22, 2024 | SQL Injection vulnerability in Online Complaint Site v.1.0 allows a remote attacker to escalate privileges via the usern... |
| CVE-2024-44331 | HIGH | 7.5 | 0.7% | Oct 22, 2024 | Incorrect Access Control in GStreamer RTSP server 1.25.0 in gst-rtsp-server/rtsp-media.c allows remote attackers to caus... |
| CVE-2024-43812 | HIGH | 8.6 | 0.2% | Oct 22, 2024 | Kieback & Peter's DDC4000 series has an insufficiently protected credentials vulnerability, which may allow an unauthent... |
| CVE-2024-43698 | CRITICAL | 9.8 | 0.4% | Oct 22, 2024 | Kieback & Peter's DDC4000 series uses weak credentials, which may allow an unauthenticated attacker to get full admin ri... |
| CVE-2024-42643 | HIGH | 7.5 | 0.6% | Oct 22, 2024 | Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligne... |
| CVE-2024-41717 | CRITICAL | 9.8 | 0.6% | Oct 22, 2024 | Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated att... |
| CVE-2024-40494 | CRITICAL | 9.8 | 1.1% | Oct 22, 2024 | Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service... |
| CVE-2024-40493 | CRITICAL | 9.8 | 0.8% | Oct 22, 2024 | Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attack... |
| CVE-2024-31029 | HIGH | 8.2 | 0.5% | Oct 22, 2024 | An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote ... |
| CVE-2024-26519 | CRITICAL | 9 | 0.3% | Oct 22, 2024 | An issue in Casa Systems NTC-221 version 2.0.99.0 and before allows a remote attacker to execute arbitrary code via a cr... |
| CVE-2024-10231 | HIGH | 8.8 | 0.5% | Oct 22, 2024 | Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corru... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now