2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-12375 | MEDIUM | 6.5 | 0.8% | Mar 20, 2025 | A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a97... |
| CVE-2024-12374 | MEDIUM | 6.1 | 0.4% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c. An... |
| CVE-2024-12217 | MEDIUM | 5.3 | 0.6% | Mar 20, 2025 | A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The i... |
| CVE-2024-12074 | MEDIUM | 6.5 | 0.7% | Mar 20, 2025 | A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webu... |
| CVE-2024-11850 | MEDIUM | 5.4 | 0.4% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in the latest version of langgenius/dify. The vulnerability is ... |
| CVE-2024-11821 | MEDIUM | 4.3 | 0.4% | Mar 20, 2025 | A privilege escalation vulnerability exists in langgenius/dify version 0.9.1. This vulnerability allows a normal user to... |
| CVE-2024-11441 | MEDIUM | 6.1 | 0.4% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in Serge version 0.9.0. The vulnerability is due to improper ne... |
| CVE-2024-11301 | MEDIUM | 6.5 | 0.5% | Mar 20, 2025 | In lunary-ai/lunary before version 1.6.3, the application allows the creation of evaluators without enforcing a unique c... |
| CVE-2024-11300 | MEDIUM | 6.5 | 0.7% | Mar 20, 2025 | In lunary-ai/lunary before version 1.6.3, an improper access control vulnerability exists where a user can access prompt... |
| CVE-2024-11173 | MEDIUM | 6.5 | 0.8% | Mar 20, 2025 | An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, lead... |
| CVE-2024-11167 | MEDIUM | 5.3 | 0.5% | Mar 20, 2025 | An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to ... |
| CVE-2024-11044 | MEDIUM | 6.1 | 0.8% | Mar 20, 2025 | An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated at... |
| CVE-2024-11037 | MEDIUM | 6.5 | 1.0% | Mar 20, 2025 | A path traversal vulnerability exists in binary-husky/gpt_academic at commit 679352d, which allows an attacker to bypass... |
| CVE-2024-11033 | MEDIUM | 6.5 | 0.7% | Mar 20, 2025 | A Denial of Service (DoS) vulnerability exists in the file upload feature of binary-husky/gpt_academic version 3.83. The... |
| CVE-2024-10955 | MEDIUM | 6.5 | 0.7% | Mar 20, 2025 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in gaizhenbiao/chuanhuchatgpt, as of commit 20b2e02.... |
| CVE-2024-10948 | MEDIUM | 6.5 | 0.8% | Mar 20, 2025 | A vulnerability in the upload function of binary-husky/gpt_academic allows any user to read arbitrary files on the syste... |
| CVE-2024-10940 | MEDIUM | 5.3 | 0.4% | Mar 20, 2025 | A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized us... |
| CVE-2024-10908 | MEDIUM | 6.1 | 0.8% | Mar 20, 2025 | An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect u... |
| CVE-2024-10812 | MEDIUM | 6.1 | 0.6% | Mar 20, 2025 | An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is... |
| CVE-2024-10727 | MEDIUM | 6.1 | 0.3% | Mar 20, 2025 | A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnera... |
| CVE-2024-10725 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. This vulnerability allows an ... |
| CVE-2024-10724 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NA... |
| CVE-2024-10723 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability al... |
| CVE-2024-10722 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows atta... |
| CVE-2024-10721 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability al... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now