2024 CVE Vulnerabilities
39,258 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43805 | MEDIUM | 6.1 | 0.4% | Aug 28, 2024 | jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Archit... |
| CVE-2024-44915 | MEDIUM | 5.5 | 0.3% | Aug 28, 2024 | An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a... |
| CVE-2024-44914 | MEDIUM | 5.5 | 0.3% | Aug 28, 2024 | An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a... |
| CVE-2024-44913 | MEDIUM | 5.5 | 0.3% | Aug 28, 2024 | An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a... |
| CVE-2024-7744 | MEDIUM | 6.5 | 0.7% | Aug 28, 2024 | In WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path... |
| CVE-2024-6053 | MEDIUM | 4.3 | 0.4% | Aug 28, 2024 | Improper access control in the clipboard synchronization feature in TeamViewer Full Client prior version 15.57 and TeamV... |
| CVE-2024-41565 | MEDIUM | 5.3 | 0.3% | Aug 28, 2024 | JustEnoughItems (JEI) 19.5.0.33 and before contains an Improper Validation of Specified Index, Position, or Offset in In... |
| CVE-2024-41564 | MEDIUM | 5.3 | 0.3% | Aug 28, 2024 | EMI v.1.1.10 and before, fixed in v.1.1.11, contains an Improper Validation of Specified Index, Position, or Offset in I... |
| CVE-2024-20413 | MEDIUM | 6.7 | 0.1% | Aug 28, 2024 | A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash ... |
| CVE-2024-20411 | MEDIUM | 6.7 | 0.2% | Aug 28, 2024 | A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash ... |
| CVE-2024-20289 | MEDIUM | 4.4 | 0.2% | Aug 28, 2024 | A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to execu... |
| CVE-2024-20279 | MEDIUM | 4.3 | 0.3% | Aug 28, 2024 | A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (... |
| CVE-2024-42900 | MEDIUM | 6.1 | 0.3% | Aug 28, 2024 | Ruoyi v4.7.9 and before was discovered to contain a cross-site scripting (XSS) vulnerability via the sql parameter of th... |
| CVE-2024-42698 | MEDIUM | 5.3 | 0.3% | Aug 28, 2024 | Roughly Enough Items (REI) v.16.0.729 and before contains an Improper Validation of Specified Index, Position, or Offset... |
| CVE-2024-8195 | MEDIUM | 5.3 | 0.5% | Aug 28, 2024 | The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability... |
| CVE-2024-7447 | MEDIUM | 5.3 | 0.4% | Aug 28, 2024 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress... |
| CVE-2024-6450 | MEDIUM | 6.1 | 0.3% | Aug 28, 2024 | HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS). An unaut... |
| CVE-2024-6449 | MEDIUM | 6.5 | 0.4% | Aug 28, 2024 | HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote co... |
| CVE-2024-7269 | MEDIUM | 5.4 | 0.4% | Aug 28, 2024 | Improper Neutralization of Input During Web Page Generation vulnerability in "Update of Personal Details" form in ConnX ... |
| CVE-2024-44943 | MEDIUM | 5.5 | 0.2% | Aug 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: mm: gup: stop abusing try_grab_folio A kernel warn... |
| CVE-2024-6312 | MEDIUM | 6.5 | 1.1% | Aug 28, 2024 | The Funnelforms Free plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including,... |
| CVE-2024-4554 | MEDIUM | 5.4 | 0.3% | Aug 28, 2024 | Improper Input Validation vulnerability in OpenText NetIQ Access Manager leads to Cross-Site Scripting (XSS) attack. Thi... |
| CVE-2024-39771 | MEDIUM | 6.8 | 0.1% | Aug 28, 2024 | QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may a... |
| CVE-2024-6448 | MEDIUM | 5.3 | 0.5% | Aug 28, 2024 | The Mollie Payments for WooCommerce plugin for WordPress is vulnerable to information exposure in all versions up to, an... |
| CVE-2024-7573 | MEDIUM | 5.3 | 0.4% | Aug 28, 2024 | The Relevanssi Live Ajax Search plugin for WordPress is vulnerable to argument injection in all versions up to, and incl... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now