2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9589 | MEDIUM | 4.8 | 0.3% | Oct 22, 2024 | The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'new_met... |
| CVE-2024-9588 | MEDIUM | 5.4 | 0.2% | Oct 22, 2024 | The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to... |
| CVE-2024-9541 | MEDIUM | 4.3 | 0.3% | Oct 22, 2024 | The News Kit Elementor Addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to... |
| CVE-2024-9627 | HIGH | 7.3 | 0.4% | Oct 22, 2024 | The TeploBot - Telegram Bot for WP plugin for WordPress is vulnerable to sensitive information disclosure due to missing... |
| CVE-2024-8852 | MEDIUM | 5.3 | 1.2% | Oct 22, 2024 | The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Sensitive Information Exposure in all versi... |
| CVE-2024-10003 | MEDIUM | 6.3 | 0.4% | Oct 22, 2024 | The Rover IDX plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing... |
| CVE-2024-10002 | HIGH | 8.8 | 0.5% | Oct 22, 2024 | The Rover IDX plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.0.0.2905. ... |
| CVE-2024-9677 | HIGH | 7.8 | 0.2% | Oct 22, 2024 | The insufficiently protected credentials vulnerability in the CLI command of the USG FLEX H series uOS firmware version ... |
| CVE-2024-8901 | HIGH | 7.5 | 0.4% | Oct 22, 2024 | The AWS ALB Route Directive Adapter For Istio repo https://github.com/awslabs/aws-alb-route-directive-adapter-for-istio... |
| CVE-2024-10125 | HIGH | 7.5 | 0.3% | Oct 22, 2024 | The Amazon.ApplicationLoadBalancer.Identity.AspNetCore repo https://github.com/awslabs/aws-alb-identity-aspnetcore#vali... |
| CVE-2024-47224 | MEDIUM | 6.5 | 0.3% | Oct 21, 2024 | A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.20... |
| CVE-2024-41714 | HIGH | 8.8 | 1.3% | Oct 21, 2024 | A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution... |
| CVE-2024-41713 | CRITICAL | 9.1 | 98.1% | Oct 21, 2024 | A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could... |
| CVE-2024-41712 | MEDIUM | 6.6 | 0.5% | Oct 21, 2024 | A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacke... |
| CVE-2024-40091 | MEDIUM | 5.3 | 0.4% | Oct 21, 2024 | Vilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated att... |
| CVE-2024-40090 | MEDIUM | 4.3 | 0.3% | Oct 21, 2024 | Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Information Disclosure. An information leak in the Boa webserver a... |
| CVE-2024-40089 | CRITICAL | 9.1 | 1.4% | Oct 21, 2024 | A Command Injection vulnerability in Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, authenticated attackers to exec... |
| CVE-2024-40088 | MEDIUM | 5.3 | 0.7% | Oct 21, 2024 | A Directory Traversal vulnerability in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthen... |
| CVE-2024-40087 | CRITICAL | 9.6 | 0.4% | Oct 21, 2024 | Vilo 5 Mesh WiFi System <= 5.16.1.33 is vulnerable to Insecure Permissions. Lack of authentication in the custom TCP ser... |
| CVE-2024-40086 | CRITICAL | 9.6 | 0.7% | Oct 21, 2024 | A Buffer Overflow vulnerability in the local_app_set_router_wifi_SSID_PWD function of Vilo 5 Mesh WiFi System <= 5.16.1.... |
| CVE-2024-40085 | CRITICAL | 9.6 | 0.7% | Oct 21, 2024 | A Buffer Overflow vulnerability in the local_app_set_router_wan function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows ... |
| CVE-2024-40084 | CRITICAL | 9.6 | 0.7% | Oct 21, 2024 | A Buffer Overflow in the Boa webserver of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows remote, unauthenticated attackers ... |
| CVE-2024-40083 | CRITICAL | 9.6 | 0.5% | Oct 21, 2024 | A Buffer Overflow vulnerabilty in the local_app_set_router_token function of Vilo 5 Mesh WiFi System <= 5.16.1.33 allows... |
| CVE-2024-35315 | MEDIUM | 5.6 | 0.8% | Oct 21, 2024 | A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instanc... |
| CVE-2024-35314 | CRITICAL | 9.8 | 1.7% | Oct 21, 2024 | A vulnerability in the Desktop Client of Mitel MiCollab through 9.7.1.110, and MiVoice Business Solution Virtual Instanc... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now