2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-4881 | HIGH | 7.5 | 0.9% | Jun 6, 2024 | A path traversal vulnerability exists in the parisneo/lollms application, affecting version 9.4.0 and potentially earlie... |
| CVE-2024-4851 | HIGH | 7.7 | 0.6% | Jun 6, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which al... |
| CVE-2024-3150 | HIGH | 8.8 | 0.8% | Jun 6, 2024 | In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Man... |
| CVE-2024-3149 | HIGH | 8.8 | 0.5% | Jun 6, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the upload link feature of mintplex-labs/anything-llm. This... |
| CVE-2024-3110 | HIGH | 8.7 | 0.7% | Jun 6, 2024 | A stored Cross-Site Scripting (XSS) vulnerability exists in the mintplex-labs/anything-llm application, affecting versio... |
| CVE-2024-3095 | HIGH | 7.7 | 0.7% | Jun 6, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the Web Research Retriever component of langchain-ai/langch... |
| CVE-2024-37153 | HIGH | 7.5 | 0.6% | Jun 6, 2024 | Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. There is an issue with how to liquid stake using ... |
| CVE-2024-36740 | HIGH | 7.5 | 0.5% | Jun 6, 2024 | An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when index as a negative num... |
| CVE-2024-36734 | HIGH | 7.5 | 0.5% | Jun 6, 2024 | Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputti... |
| CVE-2024-36732 | HIGH | 7.5 | 0.5% | Jun 6, 2024 | An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) when an empty array is proce... |
| CVE-2024-36730 | HIGH | 7.5 | 0.5% | Jun 6, 2024 | Improper input validation in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputti... |
| CVE-2024-30373 | HIGH | 7.8 | 0.6% | Jun 6, 2024 | Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remo... |
| CVE-2024-2928 | HIGH | 7.5 | 21.8% | Jun 6, 2024 | A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fix... |
| CVE-2024-2548 | HIGH | 7.5 | 0.9% | Jun 6, 2024 | A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `lollms_core/lol... |
| CVE-2024-2288 | HIGH | 8.3 | 0.3% | Jun 6, 2024 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the profile picture upload functionality of the Lollms appli... |
| CVE-2024-1880 | HIGH | 7.8 | 1.0% | Jun 6, 2024 | An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/auto... |
| CVE-2024-0520 | HIGH | 8.8 | 2.4% | Jun 6, 2024 | A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of specia... |
| CVE-2024-5509 | HIGH | 7.8 | 0.5% | Jun 6, 2024 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2024-5508 | HIGH | 7.8 | 0.7% | Jun 6, 2024 | Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allow... |
| CVE-2024-5507 | HIGH | 7.8 | 0.8% | Jun 6, 2024 | Luxion KeyShot Viewer KSP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2024-5506 | HIGH | 7.8 | 0.7% | Jun 6, 2024 | Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allow... |
| CVE-2024-5505 | HIGH | 8.8 | 47.0% | Jun 6, 2024 | NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vu... |
| CVE-2024-5303 | HIGH | 7.8 | 0.5% | Jun 6, 2024 | Kofax Power PDF PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remo... |
| CVE-2024-5302 | HIGH | 7.8 | 0.5% | Jun 6, 2024 | Kofax Power PDF PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remo... |
| CVE-2024-5301 | HIGH | 7.8 | 0.5% | Jun 6, 2024 | Kofax Power PDF PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allo... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now