2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10730 | CRITICAL | 9.8 | 0.5% | Nov 3, 2024 | A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unkno... |
| CVE-2024-10702 | CRITICAL | 9.8 | 0.6% | Nov 2, 2024 | A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unkn... |
| CVE-2024-10700 | CRITICAL | 9.8 | 0.5% | Nov 2, 2024 | A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. Thi... |
| CVE-2024-10699 | CRITICAL | 9.8 | 0.7% | Nov 2, 2024 | A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknow... |
| CVE-2024-10698 | CRITICAL | 9.8 | 1.2% | Nov 2, 2024 | A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function fo... |
| CVE-2024-10697 | CRITICAL | 9.8 | 25.5% | Nov 2, 2024 | A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is th... |
| CVE-2024-51252 | CRITICAL | 9.8 | 0.8% | Nov 1, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-51431 | CRITICAL | 9.8 | 0.6% | Nov 1, 2024 | LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable. |
| CVE-2024-28265 | CRITICAL | 9.1 | 0.4% | Nov 1, 2024 | IBOS v4.5.5 has an arbitrary file deletion vulnerability via \system\modules\dashboard\controllers\LoginController.php. |
| CVE-2024-10660 | CRITICAL | 9.8 | 5.0% | Nov 1, 2024 | A vulnerability, which was classified as critical, was found in ESAFENET CDG 5. This affects the function deleteHook of ... |
| CVE-2024-10659 | CRITICAL | 9.8 | 0.5% | Nov 1, 2024 | A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5. Affected by this issue is the funct... |
| CVE-2024-47359 | CRITICAL | 9.8 | 0.3% | Nov 1, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in averta Depicter Slider depicter.This issue affects Depicter Slider: f... |
| CVE-2024-47358 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.This issue affects Popup Maker: from n/a thro... |
| CVE-2024-47321 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Fahad Mahmood WP Datepicker wp-datepicker.This issue affects WP Datepicker: from ... |
| CVE-2024-47311 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configure... |
| CVE-2024-47308 | CRITICAL | 9.8 | 1.7% | Nov 1, 2024 | Missing Authorization vulnerability in WPDeveloper Templately templately.This issue affects Templately: from n/a through... |
| CVE-2024-47302 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Exploiting Incorrectly Confi... |
| CVE-2024-44038 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incor... |
| CVE-2024-44019 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Renzo Johnson Contact Form 7 Campaign Monitor Extension contact-form-7-campaign-m... |
| CVE-2024-43998 | CRITICAL | 9.8 | 1.4% | Nov 1, 2024 | Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by A... |
| CVE-2024-43980 | CRITICAL | 9.8 | 0.5% | Nov 1, 2024 | Missing Authorization vulnerability in CozyThemes Fota WP allows Exploiting Incorrectly Configured Access Control Securi... |
| CVE-2024-43979 | CRITICAL | 9.8 | 0.5% | Nov 1, 2024 | Missing Authorization vulnerability in CozyThemes Blockbooster allows Accessing Functionality Not Properly Constrained b... |
| CVE-2024-43974 | CRITICAL | 9.8 | 0.5% | Nov 1, 2024 | Missing Authorization vulnerability in CozyThemes ReviveNews allows Accessing Functionality Not Properly Constrained by ... |
| CVE-2024-43956 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in Caseproof, LLC Memberpress allows Accessing Functionality Not Properly Constraine... |
| CVE-2024-43929 | CRITICAL | 9.8 | 0.4% | Nov 1, 2024 | Missing Authorization vulnerability in eyecix JobSearch allows Accessing Functionality Not Properly Constrained by ACLs.... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now