2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45282 | MEDIUM | 5.3 | 0.3% | Oct 8, 2024 | Fields which are in 'read only' state in Bank Statement Draft in Manage Bank Statements application, could be modified b... |
| CVE-2024-45278 | MEDIUM | 5.4 | 0.2% | Oct 8, 2024 | SAP Commerce Backoffice does not sufficiently encode user controlled inputs, resulting in Cross-Site Scripting (XSS) vul... |
| CVE-2024-45277 | MEDIUM | 4.3 | 0.6% | Oct 8, 2024 | The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability ... |
| CVE-2024-43697 | MEDIUM | 5.5 | 0.1% | Oct 8, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input. |
| CVE-2024-43696 | MEDIUM | 5.5 | 0.1% | Oct 8, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS by memory leak. |
| CVE-2024-39831 | MEDIUM | 6.7 | 0.2% | Oct 8, 2024 | in OpenHarmony v4.1.0 allow a local attacker with high privileges arbitrary code execution in pre-installed apps through... |
| CVE-2024-39806 | MEDIUM | 5.5 | 0.2% | Oct 8, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
| CVE-2024-37179 | MEDIUM | 6.5 | 0.4% | Oct 8, 2024 | SAP BusinessObjects Business Intelligence Platform allows an authenticated user to send a specially crafted request to t... |
| CVE-2024-47969 | MEDIUM | 6.2 | 0.2% | Oct 7, 2024 | Improper resource management in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial... |
| CVE-2024-47968 | MEDIUM | 4.4 | 0.1% | Oct 7, 2024 | Improper resource shutdown in middle of certain operations on some Solidigm DC Products may allow an attacker to potenti... |
| CVE-2024-47818 | MEDIUM | 6.5 | 0.8% | Oct 7, 2024 | Saltcorn is an extensible, open source, no-code database application builder. A logged-in user with any role can delete ... |
| CVE-2024-47817 | MEDIUM | 6.1 | 0.4% | Oct 7, 2024 | Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-... |
| CVE-2024-47814 | MEDIUM | 4.7 | 0.3% | Oct 7, 2024 | Vim is an open source, command line text editor. A use-after-free was found in Vim < 9.1.0764. When closing a buffer (vi... |
| CVE-2024-47782 | MEDIUM | 5.4 | 0.3% | Oct 7, 2024 | WikiDiscover is an extension designed for use with a CreateWiki managed farm to display wikis. Special:WikiDiscover is a... |
| CVE-2024-47781 | MEDIUM | 6.1 | 0.3% | Oct 7, 2024 | CreateWiki is an extension used at Miraheze for requesting & creating wikis. The name of requested wikis is not escaped ... |
| CVE-2024-47974 | MEDIUM | 4.4 | 0.1% | Oct 7, 2024 | Race condition during resource shutdown in some Solidigm DC Products may allow an attacker to potentially enable denial ... |
| CVE-2024-47973 | MEDIUM | 5.1 | 0.1% | Oct 7, 2024 | In some Solidigm DC Products, a defect in device overprovisioning may provide information disclosure to an attacker. |
| CVE-2024-47967 | MEDIUM | 4.4 | 0.2% | Oct 7, 2024 | Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially ... |
| CVE-2024-47772 | MEDIUM | 6.1 | 0.3% | Oct 7, 2024 | Discourse is an open source platform for community discussion. An attacker can execute arbitrary JavaScript on users' br... |
| CVE-2024-47610 | MEDIUM | 5.4 | 0.3% | Oct 7, 2024 | InvenTree is an Open Source Inventory Management System. In affected versions of InvenTree it is possible for a register... |
| CVE-2024-45919 | MEDIUM | 6.5 | 0.3% | Oct 7, 2024 | A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By ma... |
| CVE-2024-45297 | MEDIUM | 4.3 | 0.3% | Oct 7, 2024 | Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the l... |
| CVE-2024-45060 | MEDIUM | 6.1 | 0.5% | Oct 7, 2024 | PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsh... |
| CVE-2024-43789 | MEDIUM | 4.3 | 0.4% | Oct 7, 2024 | Discourse is an open source platform for community discussion. A user can create a post with many replies, and then atte... |
| CVE-2024-43362 | MEDIUM | 5.4 | 35.5% | Oct 7, 2024 | Cacti is an open source performance and fault management framework. The `fileurl` parameter is not properly sanitized wh... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now