2024 CVE Vulnerabilities
39,250 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-21917 | CRITICAL | 9.1 | 0.9% | Jan 31, 2024 | A vulnerability exists in Rockwell Automation FactoryTalk® Service Platform that allows a malicious user to obtain the s... |
| CVE-2024-21916 | HIGH | 7.5 | 0.6% | Jan 31, 2024 | A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If ex... |
| CVE-2024-1111 | MEDIUM | 6.1 | 0.4% | Jan 31, 2024 | A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affecte... |
| CVE-2024-23637 | MEDIUM | 4.9 | 0.5% | Jan 31, 2024 | OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability th... |
| CVE-2024-22297 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr CBX Map f... |
| CVE-2024-22295 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RoboSoft Photo Gal... |
| CVE-2024-22293 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrea Tarantini B... |
| CVE-2024-22292 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delower WP To Do a... |
| CVE-2024-22289 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberNetikz Post v... |
| CVE-2024-22286 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aluka BA Plus – Be... |
| CVE-2024-22282 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Torbert Si... |
| CVE-2024-22163 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Sh... |
| CVE-2024-22162 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Shor... |
| CVE-2024-22161 | MEDIUM | 4.8 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD... |
| CVE-2024-22160 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bradley B. Dalina ... |
| CVE-2024-21893 | HIGH | 8.2 | 100.0% | Jan 31, 2024 | A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy... |
| CVE-2024-21888 | HIGH | 8.8 | 86.8% | Jan 31, 2024 | A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x... |
| CVE-2024-24579 | CRITICAL | 9.8 | 0.4% | Jan 31, 2024 | stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1,... |
| CVE-2024-24566 | MEDIUM | 5.3 | 0.5% | Jan 31, 2024 | Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system.... |
| CVE-2024-22310 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Formzu Inc. Formzu... |
| CVE-2024-22307 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Lab WP-Lister L... |
| CVE-2024-22306 | MEDIUM | 4.8 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hometory Mang Boar... |
| CVE-2024-22302 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ignazio Scimone Al... |
| CVE-2024-23508 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poste... |
| CVE-2024-23505 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DearHive PDF Viewe... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now