2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7116 | HIGH | 8.8 | 0.5% | Jul 26, 2024 | A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been rated as crit... |
| CVE-2024-7115 | HIGH | 8.8 | 0.5% | Jul 26, 2024 | A vulnerability was found in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to 20230911. It has been declared as c... |
| CVE-2024-7114 | HIGH | 8.8 | 0.6% | Jul 26, 2024 | A vulnerability was found in Tianchoy Blog up to 1.8.8. It has been classified as critical. This affects an unknown part... |
| CVE-2024-24623 | HIGH | 8.8 | 1.9% | Jul 25, 2024 | Softaculous Webuzo contains a command injection vulnerability in the FTP management functionality. A remote, authenticat... |
| CVE-2024-24622 | HIGH | 8.8 | 1.9% | Jul 25, 2024 | Softaculous Webuzo contains a command injection in the password reset functionality. A remote, authenticated attacker ca... |
| CVE-2024-7106 | HIGH | 8.8 | 0.4% | Jul 25, 2024 | A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown fu... |
| CVE-2024-7105 | HIGH | 8.8 | 0.4% | Jul 25, 2024 | A vulnerability classified as critical has been found in ForIP Tecnologia Administração PABX 1.x. Affected is an unknown... |
| CVE-2024-38288 | HIGH | 7.2 | 3.2% | Jul 25, 2024 | A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allow... |
| CVE-2024-29069 | HIGH | 7.3 | 0.2% | Jul 25, 2024 | In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap... |
| CVE-2024-40318 | HIGH | 7.2 | 1.2% | Jul 25, 2024 | An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploadi... |
| CVE-2024-1724 | HIGH | 8.2 | 0.3% | Jul 25, 2024 | In snapd versions prior to 2.62, when using AppArmor for enforcement of sandbox permissions, snapd failed to restrict w... |
| CVE-2024-41800 | HIGH | 7.5 | 0.4% | Jul 25, 2024 | Craft is a content management system (CMS). Craft CMS 5 allows reuse of TOTP tokens multiple times within the validity p... |
| CVE-2024-40872 | HIGH | 8.4 | 0.2% | Jul 25, 2024 | There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to vers... |
| CVE-2024-36542 | HIGH | 8.8 | 0.5% | Jul 25, 2024 | Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the s... |
| CVE-2024-7101 | HIGH | 7.3 | 0.5% | Jul 25, 2024 | A vulnerability, which was classified as critical, has been found in ForIP Tecnologia Administração PABX 1.x. This issue... |
| CVE-2024-39673 | HIGH | 7.1 | 0.1% | Jul 25, 2024 | Vulnerability of serialisation/deserialisation mismatch in the iAware module. Impact: Successful exploitation of this vu... |
| CVE-2024-39672 | HIGH | 7.1 | 0.1% | Jul 25, 2024 | Memory request logic vulnerability in the memory module. Impact: Successful exploitation of this vulnerability will affe... |
| CVE-2024-6589 | HIGH | 8.8 | 0.8% | Jul 25, 2024 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, ... |
| CVE-2024-37084 | HIGH | 8.8 | 35.2% | Jul 25, 2024 | In Spring Cloud Data Flow versions prior to 2.11.4, a malicious user who has access to the Skipper server api can use a... |
| CVE-2024-41466 | HIGH | 7.5 | 0.6% | Jul 24, 2024 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at i... |
| CVE-2024-41465 | HIGH | 7.5 | 0.6% | Jul 24, 2024 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter... |
| CVE-2024-41464 | HIGH | 7.5 | 0.6% | Jul 24, 2024 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parame... |
| CVE-2024-41463 | HIGH | 7.5 | 0.5% | Jul 24, 2024 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at... |
| CVE-2024-41462 | HIGH | 7.5 | 0.6% | Jul 24, 2024 | Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at i... |
| CVE-2024-41136 | HIGH | 8.8 | 0.9% | Jul 24, 2024 | An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now