2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41904 | HIGH | 7.5 | 0.5% | Aug 13, 2024 | A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a... |
| CVE-2024-41903 | HIGH | 7.2 | 0.4% | Aug 13, 2024 | A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected a... |
| CVE-2024-41681 | HIGH | 7.5 | 0.2% | Aug 13, 2024 | A vulnerability has been identified in Location Intelligence family (All versions < V4.4). The web server of affected pr... |
| CVE-2024-36398 | HIGH | 7.8 | 0.2% | Aug 13, 2024 | A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application executes a subset of it... |
| CVE-2024-6823 | HIGH | 8.8 | 1.3% | Aug 13, 2024 | The Media Library Assistant plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valida... |
| CVE-2024-42374 | HIGH | 8.2 | 0.5% | Aug 13, 2024 | BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source... |
| CVE-2024-43127 | HIGH | 7.1 | 0.3% | Aug 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPFactory P... |
| CVE-2024-43126 | HIGH | 7.1 | 0.3% | Aug 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sender Send... |
| CVE-2024-37930 | HIGH | 7.5 | 0.4% | Aug 12, 2024 | Insertion of Sensitive Information into Log File vulnerability in ThemeSphere SmartMag smartmag-responsive-retina-wordpr... |
| CVE-2024-43217 | HIGH | 7.1 | 0.3% | Aug 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pierre Lebe... |
| CVE-2024-43213 | HIGH | 7.1 | 0.3% | Aug 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MultiVendor... |
| CVE-2024-43163 | HIGH | 7.1 | 0.3% | Aug 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Parcel Pane... |
| CVE-2024-7704 | HIGH | 7.5 | 0.8% | Aug 12, 2024 | A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function o... |
| CVE-2024-43233 | HIGH | 7.1 | 0.3% | Aug 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky B... |
| CVE-2024-42748 | HIGH | 8.8 | 1.7% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-42747 | HIGH | 8.8 | 1.0% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-42745 | HIGH | 8.8 | 1.7% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-42744 | HIGH | 8.8 | 1.7% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-42743 | HIGH | 8.8 | 1.6% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-42742 | HIGH | 8.8 | 1.7% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-42741 | HIGH | 8.8 | 1.2% | Aug 12, 2024 | In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability... |
| CVE-2024-41710 | HIGH | 7.2 | 41.6% | Aug 12, 2024 | A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, ... |
| CVE-2024-40892 | HIGH | 7.1 | 0.9% | Aug 12, 2024 | A weak credential vulnerability exists in Firewalla Box Software versions before 1.979. This vulnerability allows a phys... |
| CVE-2024-42627 | HIGH | 8.8 | 0.3% | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/delete/3... |
| CVE-2024-42626 | HIGH | 8.8 | 0.3% | Aug 12, 2024 | FrogCMS v0.9.5 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/?/snippet/add. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now