2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41629 | MEDIUM | 5.5 | 0.2% | Sep 12, 2024 | An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive informa... |
| CVE-2024-8635 | MEDIUM | 6.5 | 0.6% | Sep 12, 2024 | A server-side request forgery issue has been discovered in GitLab EE affecting all versions starting from 16.8 prior to ... |
| CVE-2024-6840 | MEDIUM | 6.6 | 0.4% | Sep 12, 2024 | An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S A... |
| CVE-2024-6389 | MEDIUM | 4.3 | 0.4% | Sep 12, 2024 | An issue was discovered in GitLab-CE/EE affecting all versions starting with 17.0 before 17.1.7, 17.2 before 17.2.5, and... |
| CVE-2024-5435 | MEDIUM | 6.5 | 0.4% | Sep 12, 2024 | An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all ve... |
| CVE-2024-4612 | MEDIUM | 6.1 | 0.4% | Sep 12, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, a... |
| CVE-2024-6702 | MEDIUM | 4.8 | 0.2% | Sep 12, 2024 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an HTML Injection issue with Stage. |
| CVE-2024-6701 | MEDIUM | 4.8 | 0.2% | Sep 12, 2024 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with case type. |
| CVE-2024-6700 | MEDIUM | 4.8 | 0.2% | Sep 12, 2024 | Pega Platform versions 8.1 to Infinity 24.1.2 are affected by an XSS issue with App name. |
| CVE-2024-6658 | MEDIUM | 6.8 | 0.6% | Sep 12, 2024 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This is... |
| CVE-2024-42484 | MEDIUM | 6.5 | 0.4% | Sep 12, 2024 | ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An Out-of-Bound (OOB) vulnerability was discov... |
| CVE-2024-42483 | MEDIUM | 6.5 | 0.3% | Sep 12, 2024 | ESP-NOW Component provides a connectionless Wi-Fi communication protocol. An replay attacks vulnerability was discovered... |
| CVE-2024-45856 | MEDIUM | 5.4 | 0.5% | Sep 12, 2024 | A cross-site scripting (XSS) vulnerability exists in all versions of the MindsDB platform, enabling the execution of a J... |
| CVE-2024-8750 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve sess... |
| CVE-2024-8622 | MEDIUM | 6.1 | 0.4% | Sep 12, 2024 | The amCharts: Charts and Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'amcharts_jav... |
| CVE-2024-2010 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in TE Informatics V5 allows ... |
| CVE-2024-8056 | MEDIUM | 6.1 | 0.3% | Sep 12, 2024 | The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputt... |
| CVE-2024-8054 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation... |
| CVE-2024-7862 | MEDIUM | 6.5 | 0.2% | Sep 12, 2024 | The blogintroduction-wordpress-plugin WordPress plugin through 0.3.0 does not have CSRF check in place when updating its... |
| CVE-2024-7861 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The Misiek Paypal WordPress plugin through 1.1.20090324 does not have CSRF check in some places, and is missing sanitisa... |
| CVE-2024-7860 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The Simple Headline Rotator WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitis... |
| CVE-2024-7859 | MEDIUM | 6.5 | 0.2% | Sep 12, 2024 | The Visual Sound WordPress plugin through 1.03 does not have CSRF check in place when updating its settings, which could... |
| CVE-2024-7822 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The Quick Code WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well... |
| CVE-2024-7820 | MEDIUM | 6.5 | 0.2% | Sep 12, 2024 | The ILC Thickbox WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could ... |
| CVE-2024-7818 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF check in some places, and is missing sanitisati... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now