2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25639 | HIGH | 7.5 | 0.6% | Jul 8, 2024 | Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop and Web clients inadequately sanitize... |
| CVE-2024-39743 | HIGH | 7.5 | 0.6% | Jul 8, 2024 | IBM MQ Operator 3.2.2 and IBM MQ Operator 2.0.24 IBM MQ Container Developer Edition is vulnerable to denial of service c... |
| CVE-2024-37999 | HIGH | 7.8 | 0.1% | Jul 8, 2024 | A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes... |
| CVE-2024-27459 | HIGH | 7.8 | 8.3% | Jul 8, 2024 | The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can ... |
| CVE-2024-24974 | HIGH | 7.5 | 9.8% | Jul 8, 2024 | The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allo... |
| CVE-2024-38330 | HIGH | 7.8 | 0.3% | Jul 8, 2024 | IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified... |
| CVE-2024-3651 | HIGH | 7.5 | 1.4% | Jul 7, 2024 | A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting vers... |
| CVE-2024-40597 | HIGH | 7.5 | 0.4% | Jul 7, 2024 | An issue was discovered in the CheckUser extension for MediaWiki through 1.42.1. It can expose suppressed information fo... |
| CVE-2024-39486 | HIGH | 7 | 0.2% | Jul 6, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/drm_file: Fix pid refcounting race <maarten.la... |
| CVE-2024-39182 | HIGH | 7.5 | 0.4% | Jul 5, 2024 | An information disclosure vulnerability in ISPmanager v6.98.0 allows attackers to access sensitive details of the root u... |
| CVE-2024-33862 | HIGH | 7.5 | 0.6% | Jul 5, 2024 | A buffer-management vulnerability in OPC Foundation OPCFoundation.NetStandard.Opc.Ua.Core before 1.05.374.54 could allow... |
| CVE-2024-5753 | HIGH | 7.5 | 0.6% | Jul 5, 2024 | vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as `pg_read_file()`. T... |
| CVE-2024-39696 | HIGH | 8.1 | 0.5% | Jul 5, 2024 | Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can creat... |
| CVE-2024-39689 | HIGH | 7.5 | 1.0% | Jul 5, 2024 | Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verify... |
| CVE-2024-39023 | HIGH | 8.8 | 0.3% | Jul 5, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/info_deal.php?mudi=ad... |
| CVE-2024-39022 | HIGH | 8.8 | 0.3% | Jul 5, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/infoSys_deal.php?mud... |
| CVE-2024-34361 | HIGH | 8.8 | 2.8% | Jul 5, 2024 | Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vul... |
| CVE-2024-39687 | HIGH | 7.2 | 0.6% | Jul 5, 2024 | Fedify is a TypeScript library for building federated server apps powered by ActivityPub and other standards. At present... |
| CVE-2024-39321 | HIGH | 7.5 | 0.6% | Jul 5, 2024 | Traefik is an HTTP reverse proxy and load balancer. Versions prior to 2.11.6, 3.0.4, and 3.1.0-rc3 have a vulnerability ... |
| CVE-2024-37903 | HIGH | 8.2 | 0.5% | Jul 5, 2024 | Mastodon is a self-hosted, federated microblogging platform. Starting in version 2.6.0 and prior to versions 4.1.18 and ... |
| CVE-2024-37767 | HIGH | 7.5 | 0.4% | Jul 5, 2024 | Insecure permissions in the component /api/admin/user of 14Finger v1.1 allows attackers to access all user information v... |
| CVE-2024-27715 | HIGH | 8.2 | 0.4% | Jul 5, 2024 | An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privile... |
| CVE-2024-27713 | HIGH | 8.8 | 0.6% | Jul 5, 2024 | An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privile... |
| CVE-2024-27711 | HIGH | 8.8 | 0.4% | Jul 5, 2024 | An issue in Eskooly Free Online School management Software v.3.0 and before allows a remote attacker to escalate privile... |
| CVE-2024-39210 | HIGH | 7.5 | 0.8% | Jul 5, 2024 | Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page par... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now