2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-47124 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | The goTenna Pro App does not encrypt callsigns in messages. It is recommended to not use sensitive information in calls... |
| CVE-2024-47122 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | In the goTenna Pro App, the encryption keys are stored along with a static IV on the End User Device (EUD). This allows... |
| CVE-2024-47121 | MEDIUM | 5.3 | 0.1% | Sep 26, 2024 | The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted e... |
| CVE-2024-47075 | MEDIUM | 6.1 | 0.3% | Sep 26, 2024 | LayUI is a native minimalist modular Web UI component library. Versions prior to 2.9.17 have a DOM Clobbering vulnerabil... |
| CVE-2024-45989 | MEDIUM | 4 | 0.3% | Sep 26, 2024 | Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Act... |
| CVE-2024-45987 | MEDIUM | 6.5 | 0.2% | Sep 26, 2024 | Projectworld Online Voting System Version 1.0 is vulnerable to Cross Site Request Forgery (CSRF) via voter.php. This vul... |
| CVE-2024-45985 | MEDIUM | 4.7 | 0.3% | Sep 26, 2024 | A Cross Site Scripting (XSS) vulnerability in update_contact.php of Blood Bank and Donation Management System v1.0 allow... |
| CVE-2024-45984 | MEDIUM | 4.7 | 0.3% | Sep 26, 2024 | A Cross Site Scripting (XSS) vulnerability in add_donor.php of Blood Bank And Donation Management System 1.0 allows an a... |
| CVE-2024-45838 | MEDIUM | 4.3 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK Plugin does not encrypt callsigns in messages. It is advised to not use sensitive information in c... |
| CVE-2024-45723 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK Plugin does not use SecureRandom when generating passwords for sharing cryptographic keys. The ran... |
| CVE-2024-45374 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK plugin uses a weak password for sharing encryption keys via the key broadcast method. If the broad... |
| CVE-2024-45042 | MEDIUM | 4.4 | 0.3% | Sep 26, 2024 | Ory Kratos is an identity, user management and authentication system for cloud services. Prior to version 1.3.0, given a... |
| CVE-2024-43814 | MEDIUM | 4.3 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK Plugin's default settings are to share Automatic Position, Location, and Information (PLI) updates... |
| CVE-2024-43694 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | In the goTenna Pro ATAK Plugin application, the encryption keys are stored along with a static IV on the device. This a... |
| CVE-2024-43108 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK Plugin uses AES CTR type encryption for short, encrypted messages without any additional integrity... |
| CVE-2024-41931 | MEDIUM | 4.3 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK Plugin encryption key name is always sent unencrypted when the key is sent over RF through a broad... |
| CVE-2024-41722 | MEDIUM | 6.5 | 0.1% | Sep 26, 2024 | In the goTenna Pro ATAK Plugin there is a vulnerability that makes it possible to inject any custom message with any GI... |
| CVE-2024-41715 | MEDIUM | 4.3 | 0.1% | Sep 26, 2024 | The goTenna Pro ATAK Plugin does not inject extra characters into broadcasted frames to obfuscate the length of message... |
| CVE-2024-8771 | MEDIUM | 4.3 | 0.4% | Sep 26, 2024 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f... |
| CVE-2024-7259 | MEDIUM | 4.9 | 0.3% | Sep 26, 2024 | A flaw was found in oVirt. A user with administrator privileges, including users with the ReadOnlyAdmin permission, may ... |
| CVE-2024-46632 | MEDIUM | 4.3 | 0.4% | Sep 26, 2024 | Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function. |
| CVE-2024-45983 | MEDIUM | 6.3 | 0.1% | Sep 26, 2024 | A Cross-Site Request Forgery (CSRF) vulnerability exists in kishan0725's Hospital Management System version 6.3.5. The v... |
| CVE-2024-39319 | MEDIUM | 5.3 | 0.5% | Sep 26, 2024 | aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.... |
| CVE-2024-9155 | MEDIUM | 4.3 | 0.3% | Sep 26, 2024 | Mattermost versions 9.10.x <= 9.10.1, 9.9.x <= 9.9.2, 9.5.x <= 9.5.8 fail to limit access to channels files that have no... |
| CVE-2024-9177 | MEDIUM | 5.4 | 0.4% | Sep 26, 2024 | The Themedy Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's themedy_col, them... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now