2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6139 | HIGH | 7.3 | 0.5% | Jun 27, 2024 | A path traversal vulnerability exists in the XTTS server of the parisneo/lollms package version v9.6. This vulnerability... |
| CVE-2024-6090 | HIGH | 7.5 | 0.9% | Jun 27, 2024 | A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other ... |
| CVE-2024-6085 | HIGH | 8.6 | 0.6% | Jun 27, 2024 | A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerabilit... |
| CVE-2024-6038 | HIGH | 7.5 | 0.7% | Jun 27, 2024 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt.... |
| CVE-2024-5979 | HIGH | 7.5 | 0.8% | Jun 27, 2024 | In h2oai/h2o-3 version 3.46.0, the `run_tool` command in the `rapids` component allows the `main` function of any class ... |
| CVE-2024-5885 | HIGH | 8.6 | 0.6% | Jun 27, 2024 | stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not p... |
| CVE-2024-5824 | HIGH | 7.4 | 0.4% | Jun 27, 2024 | A path traversal vulnerability in the `/set_personality_config` endpoint of parisneo/lollms version 9.4.0 allows an atta... |
| CVE-2024-5820 | HIGH | 8.8 | 0.8% | Jun 27, 2024 | An unprotected WebSocket connection in the latest version of stitionai/devika (commit ecee79f) allows a malicious websit... |
| CVE-2024-4578 | HIGH | 8.4 | 0.5% | Jun 27, 2024 | This Advisory describes an issue that impacts Arista Wireless Access Points. Any entity with the ability to authenticate... |
| CVE-2024-3043 | HIGH | 7.5 | 0.5% | Jun 27, 2024 | An unauthenticated IEEE 802.15.4 'co-ordinator realignment' packet can be used to force Zigbee nodes to change their net... |
| CVE-2024-5548 | HIGH | 7.5 | 1.0% | Jun 27, 2024 | A directory traversal vulnerability exists in the stitionai/devika repository, specifically within the /api/download-pro... |
| CVE-2024-5547 | HIGH | 7.5 | 1.0% | Jun 27, 2024 | A directory traversal vulnerability exists in the /api/download-project-pdf endpoint of the stitionai/devika repository,... |
| CVE-2024-5334 | HIGH | 7.5 | 2.1% | Jun 27, 2024 | A local file read vulnerability exists in the stitionai/devika repository, affecting the latest version. The vulnerabili... |
| CVE-2024-31916 | HIGH | 7.5 | 0.5% | Jun 27, 2024 | IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unautho... |
| CVE-2024-24792 | HIGH | 7.5 | 0.7% | Jun 27, 2024 | Parsing a corrupt or malicious image with invalid color indices can cause a panic. |
| CVE-2024-39373 | HIGH | 7.2 | 1.2% | Jun 27, 2024 | TELSAT marKoni FM Transmitters are vulnerable to a command injection vulnerability through the manipulation of settings ... |
| CVE-2024-39158 | HIGH | 8.8 | 0.3% | Jun 27, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/userSys_deal.php?mud... |
| CVE-2024-39154 | HIGH | 8.8 | 0.3% | Jun 27, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/keyWord_deal.php?mud... |
| CVE-2024-22232 | HIGH | 7.7 | 0.8% | Jun 27, 2024 | A specially crafted url can be created which leads to a directory traversal in the salt file server. A malicious user ca... |
| CVE-2024-6054 | HIGH | 8.8 | 0.8% | Jun 27, 2024 | The Auto Featured Image plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation... |
| CVE-2024-6323 | HIGH | 7.5 | 0.5% | Jun 27, 2024 | Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior t... |
| CVE-2024-5655 | HIGH | 8.8 | 7.5% | Jun 27, 2024 | An issue was discovered in GitLab CE/EE affecting all versions starting from 15.8 prior to 16.11.5, starting from 17.0 p... |
| CVE-2024-28982 | HIGH | 8.2 | 0.4% | Jun 26, 2024 | Hitachi Vantara Pentaho Business Analytics Server versions before 10.1.0.0 and 9.3.0.7, including 8.3.x do not correctly... |
| CVE-2024-36829 | HIGH | 7.5 | 0.4% | Jun 26, 2024 | Incorrect access control in Teldat M1 v11.00.05.50.01 allows attackers to obtain sensitive information via a crafted que... |
| CVE-2024-23767 | HIGH | 8.8 | 0.4% | Jun 26, 2024 | An issue was discovered on HMS Anybus X-Gateway AB7832-F firmware version 3. The HICP protocol allows unauthenticated ch... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now