2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49373 | MEDIUM | 4.3 | 0.4% | Oct 22, 2024 | No Fuss Computing Centurion ERP is open source enterprise resource planning (ERP) software. Prior to version 1.2.1, an a... |
| CVE-2024-48929 | MEDIUM | 4.2 | 0.2% | Oct 22, 2024 | Umbraco is a free and open source .NET content management system. In versions on the 13.x branch prior to 13.5.2 and ver... |
| CVE-2024-48927 | MEDIUM | 4.6 | 0.4% | Oct 22, 2024 | Umbraco, a free and open source .NET content management system, has a remote code execution issue in versions on the 13.... |
| CVE-2024-48926 | LOW | 3.1 | 0.2% | Oct 22, 2024 | Umbraco, a free and open source .NET content management system, has an insufficient session expiration issue in versions... |
| CVE-2024-48925 | MEDIUM | 6.5 | 0.4% | Oct 22, 2024 | Umbraco, a free and open source .NET content management system, has an improper access control issue starting in version... |
| CVE-2024-48605 | HIGH | 7.8 | 0.5% | Oct 22, 2024 | An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper v... |
| CVE-2024-47819 | HIGH | 8.7 | 0.3% | Oct 22, 2024 | Umbraco, a free and open source .NET content management system, has a cross-site scripting vulnerability starting in ver... |
| CVE-2024-46240 | MEDIUM | 4.8 | 0.3% | Oct 22, 2024 | Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under action=system and the company/co... |
| CVE-2024-8980 | MEDIUM | 6.1 | 0.2% | Oct 22, 2024 | The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA throug... |
| CVE-2024-43177 | CRITICAL | 9.8 | 0.3% | Oct 22, 2024 | IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute. |
| CVE-2024-43173 | LOW | 3.7 | 0.2% | Oct 22, 2024 | IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute. |
| CVE-2024-38002 | HIGH | 8.8 | 0.6% | Oct 22, 2024 | The workflow component in Liferay Portal 7.3.2 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1... |
| CVE-2024-26273 | HIGH | 8.8 | 0.3% | Oct 22, 2024 | Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.4.0 through 7.4.3.103, an... |
| CVE-2024-26272 | HIGH | 8.8 | 0.3% | Oct 22, 2024 | Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.3.2 through 7.4.3.107, an... |
| CVE-2024-26271 | HIGH | 8.8 | 0.3% | Oct 22, 2024 | Cross-site request forgery (CSRF) vulnerability in the My Account widget in Liferay Portal 7.4.3.75 through 7.4.3.111, a... |
| CVE-2024-50312 | MEDIUM | 5.3 | 0.5% | Oct 22, 2024 | A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allow... |
| CVE-2024-50311 | MEDIUM | 6.5 | 0.6% | Oct 22, 2024 | A denial of service (DoS) vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batchi... |
| CVE-2024-10234 | HIGH | 7.3 | 0.6% | Oct 22, 2024 | A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. Th... |
| CVE-2024-9050 | HIGH | 7.8 | 0.5% | Oct 22, 2024 | A flaw was found in the libreswan client plugin for NetworkManager (NetkworkManager-libreswan), where it fails to proper... |
| CVE-2024-9231 | MEDIUM | 6.1 | 0.4% | Oct 22, 2024 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ... |
| CVE-2024-10189 | MEDIUM | 5.4 | 0.3% | Oct 22, 2024 | The Anchor Episodes Index (Spotify for Podcasters) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via... |
| CVE-2024-9987 | HIGH | 8.8 | 0.4% | Oct 22, 2024 | A post-authentication SQL Injection vulnerability within the filters parameter of the extensions/agents_modules_csv func... |
| CVE-2024-35308 | HIGH | 8.8 | 0.6% | Oct 22, 2024 | A post-authentication arbitrary file read vulnerability within the server plugins section in plugin edition feature. Thi... |
| CVE-2024-9591 | MEDIUM | 4.8 | 0.3% | Oct 22, 2024 | The Category and Taxonomy Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_category_ima... |
| CVE-2024-9590 | MEDIUM | 4.8 | 0.3% | Oct 22, 2024 | The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image me... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now