2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6173 | MEDIUM | 6.5 | 0.4% | Sep 10, 2024 | 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter allowed the use of ar... |
| CVE-2024-45504 | MEDIUM | 6.5 | 0.3% | Sep 10, 2024 | Cross-site request forgery (CSRF) vulnerability in multiple Alps System Integration products and the OEM products allow ... |
| CVE-2024-45285 | MEDIUM | 5.4 | 0.3% | Sep 10, 2024 | The RFC enabled function module allows a low privileged user to perform denial of service on any user and also change or... |
| CVE-2024-45283 | MEDIUM | 6 | 0.2% | Sep 10, 2024 | SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the u... |
| CVE-2024-45281 | MEDIUM | 5.8 | 0.2% | Sep 10, 2024 | SAP BusinessObjects Business Intelligence Platform allows a high privilege user to run client desktop applications even ... |
| CVE-2024-45280 | MEDIUM | 4.8 | 0.2% | Sep 10, 2024 | Due to insufficient encoding of user-controlled inputs, SAP NetWeaver AS Java allows malicious scripts to be executed in... |
| CVE-2024-45279 | MEDIUM | 6.1 | 0.3% | Sep 10, 2024 | Due to insufficient input validation, CRM Blueprint Application Builder Panel of SAP NetWeaver Application Server for AB... |
| CVE-2024-44121 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access informatio... |
| CVE-2024-44120 | MEDIUM | 4.7 | 0.2% | Sep 10, 2024 | SAP NetWeaver Enterprise Portal is vulnerable to reflected cross site scripting due to insufficient encoding of user-con... |
| CVE-2024-44117 | MEDIUM | 5.4 | 0.3% | Sep 10, 2024 | The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of a... |
| CVE-2024-21528 | MEDIUM | 5.9 | 0.6% | Sep 10, 2024 | All versions of the package node-gettext are vulnerable to Prototype Pollution via the addTranslations() function in get... |
| CVE-2024-0067 | MEDIUM | 4.3 | 0.4% | Sep 10, 2024 | Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API ledlimit.cgi was vulnerable for path t... |
| CVE-2024-45286 | MEDIUM | 6.5 | 0.3% | Sep 10, 2024 | Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Produ... |
| CVE-2024-44112 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as ... |
| CVE-2024-44116 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. Thi... |
| CVE-2024-44115 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | The RFC enabled function module allows a low privileged user to add URLs to any user's workplace favourites. This vulner... |
| CVE-2024-44113 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | Due to missing authorization checks, SAP Business Warehouse (BEx Analyzer) allows an authenticated attacker to access in... |
| CVE-2024-42380 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | The RFC enabled function module allows a low privileged user to read any user's workplace favourites and user menu along... |
| CVE-2024-42378 | MEDIUM | 6.1 | 0.2% | Sep 10, 2024 | Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in t... |
| CVE-2024-42371 | MEDIUM | 5.4 | 0.3% | Sep 10, 2024 | The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulner... |
| CVE-2024-41729 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | Due to missing authorization checks, SAP BEx Analyzer allows an authenticated attacker to access information over the ne... |
| CVE-2024-38270 | MEDIUM | 6.5 | 0.2% | Sep 10, 2024 | An insufficient entropy vulnerability caused by the improper use of a randomness function with low entropy for web authe... |
| CVE-2024-8610 | MEDIUM | 5.4 | 0.4% | Sep 9, 2024 | A vulnerability classified as problematic has been found in SourceCodester Best House Rental Management System 1.0. Affe... |
| CVE-2024-27365 | MEDIUM | 5.5 | 0.2% | Sep 9, 2024 | An issue was discovered in Samsung Mobile Processor Exynos Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380... |
| CVE-2024-44085 | MEDIUM | 6.1 | 0.5% | Sep 9, 2024 | ONLYOFFICE Docs before 8.1.0 allows XSS via a GeneratorFunction Object attack against a macro. This is related to use of... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now