2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41773 | MEDIUM | 6.5 | 0.3% | Aug 20, 2024 | IBM Global Configuration Management 7.0.2 and 7.0.3 could allow an authenticated user to archive a global baseline due t... |
| CVE-2024-6322 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | Access control for plugin data sources protected by the ReqActions json field of the plugin.json is bypassed if the user... |
| CVE-2024-43408 | MEDIUM | 6.3 | 0.2% | Aug 20, 2024 | Discourse Placeholder Forms will let you build dynamic documentation. Unsanitized and stored user input was injected in ... |
| CVE-2024-42598 | MEDIUM | 6.7 | 1.2% | Aug 20, 2024 | SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplay... |
| CVE-2024-40743 | MEDIUM | 6.1 | 0.3% | Aug 20, 2024 | The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors. |
| CVE-2024-27186 | MEDIUM | 6.1 | 0.3% | Aug 20, 2024 | The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions. |
| CVE-2024-27184 | MEDIUM | 6.1 | 0.2% | Aug 20, 2024 | Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal or not.. |
| CVE-2024-43409 | MEDIUM | 6.5 | 0.3% | Aug 20, 2024 | Ghost is a Node.js content management system. Improper authentication on some endpoints used for member actions would al... |
| CVE-2024-43397 | MEDIUM | 4.3 | 0.3% | Aug 20, 2024 | Apollo is a configuration management system. A vulnerability exists in the synchronization configuration feature that al... |
| CVE-2024-43377 | MEDIUM | 4.3 | 0.2% | Aug 20, 2024 | Umbraco CMS is an ASP.NET CMS. An authenticated user can access a few unintended endpoints. This issue is fixed in 14.1.... |
| CVE-2024-43376 | MEDIUM | 5.3 | 0.4% | Aug 20, 2024 | Umbraco is an ASP.NET CMS. Some endpoints in the Management API can return stack trace information, even when Umbraco is... |
| CVE-2024-42369 | MEDIUM | 5.3 | 0.5% | Aug 20, 2024 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. A malicious homeserver can craft a room o... |
| CVE-2024-6379 | MEDIUM | 6.1 | 0.2% | Aug 20, 2024 | A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release... |
| CVE-2024-6378 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEX... |
| CVE-2024-6377 | MEDIUM | 6.1 | 0.3% | Aug 20, 2024 | An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPER... |
| CVE-2024-39094 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix par... |
| CVE-2024-42560 | MEDIUM | 6.1 | 0.4% | Aug 20, 2024 | A cross-site scripting (XSS) vulnerability in the component update_page_details.php of Blood Bank And Donation Managemen... |
| CVE-2024-42335 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | 7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-41697 | MEDIUM | 6.1 | 0.3% | Aug 20, 2024 | Priority - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
| CVE-2024-25009 | MEDIUM | 6.5 | 0.3% | Aug 20, 2024 | Ericsson Packet Core Controller (PCC) contains a vulnerability in Access and Mobility Management Function (AMF) where im... |
| CVE-2024-7054 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress... |
| CVE-2024-38808 | MEDIUM | 4.3 | 0.5% | Aug 20, 2024 | In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a speci... |
| CVE-2024-5576 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | The Tutor LMS Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'course_carouse... |
| CVE-2024-6864 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | The WP Last Modified Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘template’ attribute... |
| CVE-2024-7782 | MEDIUM | 6.5 | 0.9% | Aug 20, 2024 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now