2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37769 | HIGH | 8.8 | 0.5% | Jul 5, 2024 | Insecure permissions in 14Finger v1.1 allow attackers to escalate privileges from normal user to Administrator via a cra... |
| CVE-2024-39027 | HIGH | 7.5 | 0.4% | Jul 5, 2024 | SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through t... |
| CVE-2024-6525 | HIGH | 8.8 | 3.1% | Jul 5, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20230922. It has been rated as proble... |
| CVE-2024-6524 | HIGH | 8.8 | 0.5% | Jul 5, 2024 | A vulnerability was found in ShopXO up to 6.1.0. It has been declared as critical. Affected by this vulnerability is an ... |
| CVE-2024-6209 | HIGH | 7.5 | 17.2% | Jul 5, 2024 | Unauthorized file access in WEB Server in ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01 ; MATRIX Series ... |
| CVE-2024-39480 | HIGH | 7.8 | 0.3% | Jul 5, 2024 | In the Linux kernel, the following vulnerability has been resolved: kdb: Fix buffer overflow during tab-complete Curre... |
| CVE-2024-39479 | HIGH | 7.8 | 0.2% | Jul 5, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/hwmon: Get rid of devm When both hwmon an... |
| CVE-2024-36041 | HIGH | 7.8 | 0.3% | Jul 5, 2024 | KSmserver in KDE Plasma Workspace (aka plasma-workspace) before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ... |
| CVE-2024-39943 | HIGH | 8.8 | 48.8% | Jul 4, 2024 | rejetto HFS (aka HTTP File Server) 3 before 0.52.10 on Linux, UNIX, and macOS allows OS command execution by remote auth... |
| CVE-2024-39937 | HIGH | 7.5 | 0.9% | Jul 4, 2024 | supOS 5.0 allows api/image/download?fileName=../ directory traversal for reading files. |
| CVE-2024-39935 | HIGH | 8.8 | 0.9% | Jul 4, 2024 | jc21 NGINX Proxy Manager before 2.11.3 allows backend/internal/certificate.js OS command injection by an authenticated u... |
| CVE-2024-39934 | HIGH | 7.8 | 0.2% | Jul 4, 2024 | Robotmk before 2.0.1 allows a local user to escalate privileges (e.g., to SYSTEM) if automated Python environment setup ... |
| CVE-2024-39933 | HIGH | 7.7 | 0.7% | Jul 4, 2024 | Gogs through 0.13.0 allows argument injection during the tagging of a new release. |
| CVE-2024-6506 | HIGH | 8.2 | 0.5% | Jul 4, 2024 | Information exposure vulnerability in the MRW plugin, in its 5.4.3 version, affecting the "mrw_log" functionality. This ... |
| CVE-2024-6507 | HIGH | 8.1 | 1.1% | Jul 4, 2024 | Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() API |
| CVE-2024-5943 | HIGH | 8.8 | 0.3% | Jul 4, 2024 | The Nested Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, ... |
| CVE-2024-6319 | HIGH | 8.8 | 0.9% | Jul 4, 2024 | The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'u... |
| CVE-2024-6318 | HIGH | 8.8 | 0.9% | Jul 4, 2024 | The IMGspider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'u... |
| CVE-2024-3904 | HIGH | 8.8 | 0.2% | Jul 4, 2024 | Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-V... |
| CVE-2024-1182 | HIGH | 7 | 0.3% | Jul 4, 2024 | Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi E... |
| CVE-2024-2385 | HIGH | 8.8 | 0.9% | Jul 4, 2024 | The Elementor Addons by Livemesh plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and i... |
| CVE-2024-38345 | HIGH | 8.1 | 0.3% | Jul 4, 2024 | A cross-site request forgery vulnerability exists in Sola Testimonials versions prior to 3.0.0. If this vulnerability is... |
| CVE-2024-6284 | HIGH | 7.3 | 0.3% | Jul 3, 2024 | In https://github.com/google/nftables IP addresses were encoded in the wrong byte order, resulting in an nftables conf... |
| CVE-2024-34750 | HIGH | 7.5 | 4.6% | Jul 3, 2024 | Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When proc... |
| CVE-2024-33871 | HIGH | 8.8 | 1.4% | Jul 3, 2024 | An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution v... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now