2024 CVE Vulnerabilities
39,217 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-44905 | MEDIUM | 6.5 | 0.4% | Jun 12, 2025 | go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go. |
| CVE-2024-9512 | MEDIUM | 5.9 | 0.2% | Jun 12, 2025 | An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prio... |
| CVE-2024-35295 | MEDIUM | 6.1 | 0.2% | Jun 11, 2025 | A vulnerability has been identified in Perfect Harmony GH180 (All versions >= V8.0 < V8.3.3 with NXGPro+ controller manu... |
| CVE-2024-8270 | MEDIUM | 5.5 | 0.2% | Jun 11, 2025 | The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Contr... |
| CVE-2024-41505 | MEDIUM | 6.1 | 0.2% | Jun 10, 2025 | Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the "Pessoas" (persons) section... |
| CVE-2024-41504 | MEDIUM | 6.1 | 0.2% | Jun 10, 2025 | Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS). In the "Oportunidades" (opportuni... |
| CVE-2024-41503 | MEDIUM | 6.1 | 0.2% | Jun 10, 2025 | Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) in the field "Ttulo" (title) insid... |
| CVE-2024-41502 | MEDIUM | 6.1 | 0.2% | Jun 10, 2025 | Jetimob Plataforma Imobiliaria 20240627-0 is vulnerable to Cross Site Scripting (XSS) via the form field "Observaces" (o... |
| CVE-2024-37396 | MEDIUM | 5.4 | 0.3% | Jun 10, 2025 | A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users t... |
| CVE-2024-37395 | MEDIUM | 5.4 | 0.3% | Jun 10, 2025 | A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated us... |
| CVE-2024-37394 | MEDIUM | 5.4 | 0.4% | Jun 10, 2025 | A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users ... |
| CVE-2024-57189 | MEDIUM | 5.4 | 0.3% | Jun 10, 2025 | In Erxes <1.6.2, an authenticated attacker can write to arbitrary files on the system using a Path Traversal vulnerabili... |
| CVE-2024-57186 | MEDIUM | 5.4 | 0.4% | Jun 10, 2025 | In Erxes <1.6.2, an unauthenticated attacker can read arbitrary files from the system using a Path Traversal vulnerabili... |
| CVE-2024-54019 | MEDIUM | 6.5 | 0.1% | Jun 10, 2025 | A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 thr... |
| CVE-2024-50568 | MEDIUM | 5.9 | 0.4% | Jun 10, 2025 | A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 thro... |
| CVE-2024-50562 | MEDIUM | 4.8 | 1.1% | Jun 10, 2025 | An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, ve... |
| CVE-2024-45329 | MEDIUM | 4.3 | 0.3% | Jun 10, 2025 | A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5,... |
| CVE-2024-32119 | MEDIUM | 4.8 | 0.3% | Jun 10, 2025 | An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an u... |
| CVE-2024-41797 | MEDIUM | 5.3 | 0.3% | Jun 10, 2025 | A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions < V3.1), SCALANCE XC316-8 (6GK53... |
| CVE-2024-40625 | MEDIUM | 4.9 | 0.3% | Jun 10, 2025 | GeoServer is an open source server that allows users to share and edit geospatial data. The Coverage rest api /workspace... |
| CVE-2024-47081 | MEDIUM | 5.3 | 0.8% | Jun 9, 2025 | Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to... |
| CVE-2024-46452 | MEDIUM | 6.1 | 0.3% | Jun 9, 2025 | A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b a... |
| CVE-2024-9994 | MEDIUM | 5.4 | 0.2% | Jun 7, 2025 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo... |
| CVE-2024-9993 | MEDIUM | 5.4 | 0.2% | Jun 7, 2025 | The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for Wo... |
| CVE-2024-56805 | MEDIUM | 5.4 | 0.4% | Jun 6, 2025 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vu... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now