2024 CVE Vulnerabilities

39,257 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-23766HIGH7.5An issue was discovered on HMS Anybus X-Gateway AB7832-F 3 devices. The gateway exposes a web interface on port 80. An u...
CVE-2024-33329HIGH7.5A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access interna...
CVE-2024-6354HIGH7.2Improper access control in PAM dashboard in Devolutions Remote Desktop Manager 2024.2.11 and earlier on Windows allows a...
CVE-2024-4758HIGH7.6The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, whi...
CVE-2024-34581HIGH7.3The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a ...
CVE-2024-37140HIGH8.8Dell PowerProtect DD, versions prior to 8.0, LTS 7.13.1.0, LTS 7.10.1.30, LTS 7.7.5.40 contain an OS command injection v...
CVE-2024-29176HIGH8.8Dell PowerProtect DD, version(s) 8.0, 7.13.1.0, 7.10.1.30, 7.7.5.40, contain(s) an Out-of-bounds Write vulnerability. A ...
CVE-2024-5460HIGH8.1A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Brocade Fabric...
CVE-2024-38526HIGH7.2pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript fil...
CVE-2024-37742HIGH8.2Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulnerability allows an attacker to share cli...
CVE-2024-5019HIGH7.5In WhatsUp Gold versions released before 2023.1.3,  an unauthenticated Arbitrary File Read issue exists in Wug.UI.Areas...
CVE-2024-5018HIGH7.5In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Path Traversal vulnerability exists Wug.UI.Areas.W...
CVE-2024-5016HIGH7.2In WhatsUp Gold versions released before 2023.1.3, Distributed Edition installations can be exploited by using a deseria...
CVE-2024-5015HIGH8.8In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.S...
CVE-2024-5013HIGH7.5In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. ...
CVE-2024-5012HIGH8.6In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Cred...
CVE-2024-38516HIGH8.8ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from envi...
CVE-2024-37855HIGH8.4An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote a...
CVE-2024-21740HIGH7.4Artery AT32F415CBT7 and AT32F421C8T7 devices have Incorrect Access Control.
CVE-2024-6206HIGH7.5A security vulnerability has been identified in HPE Athonet Mobile Core software. The core application contains a code i...
CVE-2024-5011HIGH7.5In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A speciall...
CVE-2024-5010HIGH7.5In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality.  A specia...
CVE-2024-5009HIGH8.4In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.Instal...
CVE-2024-5008HIGH8.8In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitr...
CVE-2024-4498HIGH7.7A Path Traversal and Remote File Inclusion (RFI) vulnerability exists in the parisneo/lollms-webui application, affectin...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now