2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8800 | MEDIUM | 6.1 | 0.4% | Oct 2, 2024 | The RabbitLoader – Website Speed Optimization for improving Core Web Vital metrics with Cache, Image Optimization, and m... |
| CVE-2024-8254 | MEDIUM | 6.3 | 0.5% | Oct 2, 2024 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f... |
| CVE-2024-9333 | MEDIUM | 5.3 | 0.4% | Oct 2, 2024 | Permissions bypass in M-Files Connector for Copilot before version 24.9.3 allows authenticated user to access limited am... |
| CVE-2024-9174 | MEDIUM | 5.4 | 0.3% | Oct 2, 2024 | Stored HTML Injection in Social Module in M-Files Hubshare before version 5.0.8.6 allows authenticated user to spoof UI |
| CVE-2024-21530 | MEDIUM | 4.5 | 0.1% | Oct 2, 2024 | Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, ... |
| CVE-2024-9407 | MEDIUM | 4.7 | 0.3% | Oct 1, 2024 | A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction. The system does not pro... |
| CVE-2024-47609 | MEDIUM | 6.9 | 0.6% | Oct 1, 2024 | Tonic is a native gRPC client & server implementation with async/await support. When using tonic::transport::Server ther... |
| CVE-2024-47528 | MEDIUM | 4.8 | 0.4% | Oct 1, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting (XSS) can be ach... |
| CVE-2024-47527 | MEDIUM | 5.4 | 0.5% | Oct 1, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-47525 | MEDIUM | 5.4 | 26.2% | Oct 1, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-47524 | MEDIUM | 4.8 | 0.5% | Oct 1, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. User with Admin role can create a Device Gro... |
| CVE-2024-47523 | MEDIUM | 5.4 | 0.6% | Oct 1, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting (XSS) vulnerab... |
| CVE-2024-46082 | MEDIUM | 5.4 | 0.3% | Oct 1, 2024 | Scriptcase v.9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in nm_cor.php via the form and field parame... |
| CVE-2024-9411 | MEDIUM | 5.3 | 0.3% | Oct 1, 2024 | A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admi... |
| CVE-2024-9355 | MEDIUM | 6.5 | 0.3% | Oct 1, 2024 | A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized b... |
| CVE-2024-46083 | MEDIUM | 5.4 | 0.3% | Oct 1, 2024 | Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious p... |
| CVE-2024-46081 | MEDIUM | 5.4 | 0.3% | Oct 1, 2024 | Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS). An authenticated user can craft malicious p... |
| CVE-2024-46079 | MEDIUM | 6.1 | 0.3% | Oct 1, 2024 | Scriptcase v9.10.023 and before is vulnerable to Cross Site Scripting (XSS) in proj_new.php via the Descricao parameter. |
| CVE-2024-31835 | MEDIUM | 4.8 | 0.9% | Oct 1, 2024 | Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code vi... |
| CVE-2024-9398 | MEDIUM | 5.3 | 0.6% | Oct 1, 2024 | By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if... |
| CVE-2024-9397 | MEDIUM | 6.1 | 0.4% | Oct 1, 2024 | A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permiss... |
| CVE-2024-9395 | MEDIUM | 5.3 | 0.3% | Oct 1, 2024 | A specially crafted filename containing a large number of spaces could obscure the file's extension when displayed in th... |
| CVE-2024-9391 | MEDIUM | 6.5 | 0.3% | Oct 1, 2024 | A user who enables full-screen mode on a specially crafted web page could potentially be prevented from exiting full scr... |
| CVE-2024-47604 | MEDIUM | 6.1 | 0.7% | Oct 1, 2024 | NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability in its handli... |
| CVE-2024-47071 | MEDIUM | 6.8 | 0.5% | Oct 1, 2024 | OSS Endpoint Manager is an endpoint manager module for FreePBX. OSS Endpoint Manager module activation can allow authent... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now