2024 CVE Vulnerabilities
39,242 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5133 | HIGH | 8.1 | 0.5% | Jun 6, 2024 | In lunary-ai/lunary version 1.2.4, an account takeover vulnerability exists due to the exposure of password recovery tok... |
| CVE-2024-5132 | — | — | — | Jun 6, 2024 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-5131 | MEDIUM | 6.5 | 0.5% | Jun 6, 2024 | An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting versions up to and includi... |
| CVE-2024-5130 | HIGH | 7.5 | 0.5% | Jun 6, 2024 | An Incorrect Authorization vulnerability exists in lunary-ai/lunary versions up to and including 1.2.2, which allows una... |
| CVE-2024-5129 | HIGH | 8.2 | 0.4% | Jun 6, 2024 | A Privilege Escalation Vulnerability exists in lunary-ai/lunary version 1.2.2, where any user can delete any datasets du... |
| CVE-2024-5128 | HIGH | 8.8 | 0.5% | Jun 6, 2024 | An Insecure Direct Object Reference (IDOR) vulnerability was identified in lunary-ai/lunary, affecting versions up to an... |
| CVE-2024-5126 | MEDIUM | 6.5 | 0.3% | Jun 6, 2024 | An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.pat... |
| CVE-2024-5124 | HIGH | 7.5 | 1.4% | Jun 6, 2024 | A timing attack vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, specifically within the password comp... |
| CVE-2024-4890 | MEDIUM | 4.9 | 0.6% | Jun 6, 2024 | A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' pr... |
| CVE-2024-4888 | HIGH | 8.1 | 0.6% | Jun 6, 2024 | BerriAI's litellm, in its latest version, is vulnerable to arbitrary file deletion due to improper input validation on t... |
| CVE-2024-4881 | HIGH | 7.5 | 0.9% | Jun 6, 2024 | A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlie... |
| CVE-2024-4851 | HIGH | 7.7 | 0.6% | Jun 6, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which al... |
| CVE-2024-4320 | CRITICAL | 9.8 | 34.4% | Jun 6, 2024 | A remote code execution (RCE) vulnerability exists in the '/install_extension' endpoint of the parisneo/lollms-webui app... |
| CVE-2024-3429 | CRITICAL | 9.8 | 28.3% | Jun 6, 2024 | A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_en... |
| CVE-2024-3408 | CRITICAL | 9.8 | 78.0% | Jun 6, 2024 | man-group/dtale version 3.10.0 is vulnerable to an authentication bypass and remote code execution (RCE) due to improper... |
| CVE-2024-3404 | MEDIUM | 6.5 | 0.5% | Jun 6, 2024 | In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper... |
| CVE-2024-3402 | MEDIUM | 5.4 | 0.5% | Jun 6, 2024 | A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to ina... |
| CVE-2024-3322 | CRITICAL | 9.8 | 0.7% | Jun 6, 2024 | A path traversal vulnerability exists in the 'cyber_security/codeguard' native personality of the parisneo/lollms-webui,... |
| CVE-2024-3234 | CRITICAL | 9.8 | 3.8% | Jun 6, 2024 | The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio... |
| CVE-2024-3166 | CRITICAL | 9.6 | 1.0% | Jun 6, 2024 | A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application ... |
| CVE-2024-3153 | MEDIUM | 6.5 | 0.7% | Jun 6, 2024 | mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint... |
| CVE-2024-3150 | HIGH | 8.8 | 0.8% | Jun 6, 2024 | In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Man... |
| CVE-2024-3149 | HIGH | 8.8 | 0.5% | Jun 6, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the upload link feature of mintplex-labs/anything-llm. This... |
| CVE-2024-3110 | HIGH | 8.7 | 0.7% | Jun 6, 2024 | A stored Cross-Site Scripting (XSS) vulnerability exists in the mintplex-labs/anything-llm application, affecting versio... |
| CVE-2024-3102 | MEDIUM | 5.3 | 0.5% | Jun 6, 2024 | A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now