2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-42770 | MEDIUM | 4.7 | 0.5% | Aug 22, 2024 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php" of Kashipara Hotel Management Sys... |
| CVE-2024-42769 | MEDIUM | 6.1 | 0.4% | Aug 22, 2024 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "/core/signup_user.php " of Kashipara Hotel Management... |
| CVE-2024-42497 | MEDIUM | 4.9 | 0.3% | Aug 22, 2024 | Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permission... |
| CVE-2024-3127 | MEDIUM | 4.3 | 0.3% | Aug 22, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 17.1.6, all versions starting... |
| CVE-2024-36441 | MEDIUM | 5.4 | 0.3% | Aug 22, 2024 | Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to ope... |
| CVE-2024-43787 | MEDIUM | 5 | 0.2% | Aug 22, 2024 | Hono is a Web application framework that provides support for any JavaScript runtime. Hono CSRF middleware can be bypass... |
| CVE-2024-43398 | MEDIUM | 5.9 | 1.2% | Aug 22, 2024 | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.6 has a DoS vulnerability when it parses an XML that has many... |
| CVE-2024-36440 | MEDIUM | 6.8 | 0.3% | Aug 22, 2024 | An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may ... |
| CVE-2024-7848 | MEDIUM | 6.5 | 0.3% | Aug 22, 2024 | The User Private Files – WordPress File Sharing Plugin plugin for WordPress is vulnerable to Insecure Direct Object Refe... |
| CVE-2024-39746 | MEDIUM | 5.9 | 0.3% | Aug 22, 2024 | IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could allow a remote attacker to obtain sensitive inform... |
| CVE-2024-39744 | MEDIUM | 4.3 | 0.2% | Aug 22, 2024 | IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could ... |
| CVE-2024-35151 | MEDIUM | 6.5 | 0.4% | Aug 22, 2024 | IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper a... |
| CVE-2024-7778 | MEDIUM | 5.4 | 0.3% | Aug 22, 2024 | The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all... |
| CVE-2024-6870 | MEDIUM | 5.4 | 0.3% | Aug 22, 2024 | The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file uploads in ... |
| CVE-2024-8072 | MEDIUM | 5.3 | 0.6% | Aug 22, 2024 | Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users |
| CVE-2024-43813 | MEDIUM | 4.3 | 0.2% | Aug 22, 2024 | Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to enforce proper access controls which allows any authenticat... |
| CVE-2024-42411 | MEDIUM | 5.3 | 0.3% | Aug 22, 2024 | Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to restrict the input in POST ... |
| CVE-2024-39836 | MEDIUM | 6.5 | 0.3% | Aug 22, 2024 | Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to ensure that remote/synt... |
| CVE-2024-39810 | MEDIUM | 4.9 | 0.5% | Aug 22, 2024 | Mattermost versions 9.5.x <= 9.5.7 and 9.10.x <= 9.10.0 fail to time limit and size limit the CA path file in the Elasti... |
| CVE-2024-45165 | MEDIUM | 5.3 | 0.2% | Aug 22, 2024 | An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with e... |
| CVE-2024-7836 | MEDIUM | 4.3 | 0.3% | Aug 22, 2024 | The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the dup... |
| CVE-2024-5583 | MEDIUM | 5.4 | 0.2% | Aug 22, 2024 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre... |
| CVE-2024-42056 | MEDIUM | 6.5 | 0.2% | Aug 22, 2024 | Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data. Credentials f... |
| CVE-2024-8035 | MEDIUM | 4.3 | 0.3% | Aug 21, 2024 | Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker ... |
| CVE-2024-8034 | MEDIUM | 4.3 | 0.4% | Aug 21, 2024 | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now