2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7346 | MEDIUM | 4.8 | 0.2% | Sep 3, 2024 | Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perfo... |
| CVE-2024-34463 | MEDIUM | 5.1 | 0.7% | Sep 3, 2024 | BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. (The p... |
| CVE-2024-8388 | MEDIUM | 5.3 | 0.3% | Sep 3, 2024 | Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing th... |
| CVE-2024-8386 | MEDIUM | 6.1 | 0.4% | Sep 3, 2024 | If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of anot... |
| CVE-2024-44920 | MEDIUM | 6.1 | 0.3% | Sep 3, 2024 | A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to e... |
| CVE-2024-37136 | MEDIUM | 4.9 | 0.4% | Sep 3, 2024 | Dell Path to PowerProtect, versions 1.1, 1.2, contains an Exposure of Private Personal Information to an Unauthorized Ac... |
| CVE-2024-42061 | MEDIUM | 6.1 | 0.3% | Sep 3, 2024 | A reflected cross-site scripting (XSS) vulnerability in the CGI program "dynamic_script.cgi" of Zyxel ATP series firmwar... |
| CVE-2024-6343 | MEDIUM | 4.9 | 0.6% | Sep 3, 2024 | A buffer overflow vulnerability in the CGI program of Zyxel ATP series firmware versions from V4.32 through V5.38, USG F... |
| CVE-2024-45621 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | The Electron desktop application of Rocket.Chat through 6.3.4 allows stored XSS via links in an uploaded file, related t... |
| CVE-2024-6920 | MEDIUM | 6.1 | 0.2% | Sep 2, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NAC Telecommunicat... |
| CVE-2024-45313 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | Overleaf is a web-based collaborative LaTeX editor. When installing Server Pro using the Overleaf Toolkit from before 20... |
| CVE-2024-45312 | MEDIUM | 5.3 | 0.5% | Sep 2, 2024 | Overleaf is a web-based collaborative LaTeX editor. Overleaf Community Edition and Server Pro prior to version 5.0.7 (or... |
| CVE-2024-45308 | MEDIUM | 6.5 | 0.6% | Sep 2, 2024 | HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or Ma... |
| CVE-2024-45306 | MEDIUM | 5.5 | 0.3% | Sep 2, 2024 | Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and rem... |
| CVE-2024-44947 | MEDIUM | 5.5 | 0.9% | Sep 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before se... |
| CVE-2024-43801 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | Jellyfin is an open source self hosted media server. The Jellyfin user profile image upload accepts SVG files, allowing ... |
| CVE-2024-43797 | MEDIUM | 4.3 | 0.5% | Sep 2, 2024 | audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or ac... |
| CVE-2024-43792 | MEDIUM | 6.1 | 0.3% | Sep 2, 2024 | Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.17.0 o... |
| CVE-2024-28100 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | eLabFTW is an open source electronic lab notebook for research labs. By uploading specially crafted files, a regular use... |
| CVE-2024-8004 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPER... |
| CVE-2024-7939 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an ... |
| CVE-2024-7938 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x thr... |
| CVE-2024-7932 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allow... |
| CVE-2024-38858 | MEDIUM | 6.1 | 0.3% | Sep 2, 2024 | Improper neutralization of input in Checkmk before version 2.3.0p14 allows attackers to inject and run malicious scripts... |
| CVE-2024-33043 | MEDIUM | 5.5 | 0.1% | Sep 2, 2024 | Transient DOS while handling PS event when Program Service name length offset value is set to 255. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now