2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48908 | MEDIUM | 6.9 | 0.4% | Aug 28, 2025 | lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there i... |
| CVE-2024-49790 | MEDIUM | 5.4 | 0.2% | Aug 28, 2025 | IBM Watson Studio on Cloud Pak for Data 4.0 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows an ... |
| CVE-2024-58240 | HIGH | 7.8 | 0.2% | Aug 28, 2025 | In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling ... |
| CVE-2024-13807 | HIGH | 7.5 | 0.4% | Aug 28, 2025 | The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,... |
| CVE-2024-9648 | MEDIUM | 6.1 | 0.2% | Aug 28, 2025 | The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation i... |
| CVE-2024-13985 | CRITICAL | 10 | 7.7% | Aug 27, 2025 | A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to exe... |
| CVE-2024-13984 | CRITICAL | 10 | 0.8% | Aug 27, 2025 | QiAnXin TianQing Management Center versions up to and including 6.7.0.4130 contain a path traversal vulnerability in the... |
| CVE-2024-13982 | HIGH | 8.7 | 1.0% | Aug 27, 2025 | SPON IP Network Broadcast System, a digital audio transmission platform developed by SPON Communications, contains an ar... |
| CVE-2024-13981 | CRITICAL | 10 | 0.8% | Aug 27, 2025 | LiveBOS, an object-oriented business architecture middleware suite developed by Apex Software Co., Ltd., contains an arb... |
| CVE-2024-13980 | CRITICAL | 10 | 1.2% | Aug 27, 2025 | H3C Intelligent Management Center (IMC) versions up to and including E0632H07 contains a remote command execution vulner... |
| CVE-2024-13979 | CRITICAL | 9.8 | 2.9% | Aug 27, 2025 | A SQL injection vulnerability exists in the St. Joe ERP system ("圣乔ERP系统") that allows unauthenticated remote attackers ... |
| CVE-2024-37777 | HIGH | 8.8 | 0.5% | Aug 27, 2025 | O2OA v9.0.3 was discovered to contain a remote code execution (RCE) vulnerability via the mainOutput() function. |
| CVE-2024-49740 | MEDIUM | 5.5 | 0.1% | Aug 26, 2025 | In multiple locations, there is a possible crash loop due to resource exhaustion. This could lead to local denial of ser... |
| CVE-2024-47192 | MEDIUM | 5.3 | 0.1% | Aug 26, 2025 | An issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL can allow an attacker ... |
| CVE-2024-35203 | MEDIUM | 6.1 | 0.2% | Aug 26, 2025 | Mahara before 22.10.6, 23.04.6, and 24.04.1 allows cross-site scripting (XSS) via a file, with JavaScript code as part o... |
| CVE-2024-39335 | CRITICAL | 9.1 | 0.3% | Aug 26, 2025 | Supported versions of Mahara 24.04 before 24.04.1 and 23.04 before 23.04.6 are vulnerable to information being disclosed... |
| CVE-2024-47853 | HIGH | 8.8 | 0.3% | Aug 26, 2025 | An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases w... |
| CVE-2024-45753 | MEDIUM | 6.1 | 0.2% | Aug 26, 2025 | In Mahara 23.04.8 and 24.04.4, the external RSS feed block can cause XSS if the external feed XML has a malicious value ... |
| CVE-2024-8860 | MEDIUM | 4.3 | 0.2% | Aug 26, 2025 | The Tourfic plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on... |
| CVE-2024-46413 | MEDIUM | 5.1 | 0.3% | Aug 25, 2025 | Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.... |
| CVE-2024-46412 | MEDIUM | 6.5 | 0.4% | Aug 25, 2025 | Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a cra... |
| CVE-2024-39923 | MEDIUM | 6.1 | 0.2% | Aug 25, 2025 | An issue was discovered in Mahara 24.04 before 24.04.2 and 23.04 before 23.04.7. The About, Contact, and Help footer lin... |
| CVE-2024-48988 | HIGH | 7.6 | 0.6% | Aug 22, 2025 | SQL Injection vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users... |
| CVE-2024-53499 | CRITICAL | 9.8 | 0.5% | Aug 22, 2025 | Jeewms v3.7 was discovered to contain a SQL injection vulnerability via the CgReportController API. |
| CVE-2024-53496 | CRITICAL | 9.8 | 0.5% | Aug 22, 2025 | Incorrect access control in the doFilter function of my-site v1.0.2.RELEASE allows attackers to access sensitive compone... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now