2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1662 | HIGH | 7.5 | 0.4% | Jun 5, 2024 | Missing Authentication for Critical Function, Missing Authorization vulnerability in PORTY Smart Tech Technology Joint S... |
| CVE-2024-4743 | HIGH | 8.8 | 0.5% | Jun 5, 2024 | The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to SQL Injection via the orderBy a... |
| CVE-2024-1272 | HIGH | 7.5 | 0.4% | Jun 5, 2024 | Inclusion of Sensitive Information in Source Code vulnerability in TNB Mobile Solutions Cockpit Software allows Retrieve... |
| CVE-2024-23669 | HIGH | 8.8 | 0.5% | Jun 5, 2024 | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,... |
| CVE-2024-4084 | HIGH | 7.5 | 0.5% | Jun 5, 2024 | A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of mintplex-labs/anything-llm, allowing ... |
| CVE-2024-34363 | HIGH | 7.5 | 0.7% | Jun 4, 2024 | Envoy is a cloud-native, open source edge and service proxy. Due to how Envoy invoked the nlohmann JSON library, the lib... |
| CVE-2024-32976 | HIGH | 7.5 | 0.7% | Jun 4, 2024 | Envoy is a cloud-native, open source edge and service proxy. Envoyproxy with a Brotli filter can get into an endless loo... |
| CVE-2024-32975 | HIGH | 7.5 | 0.7% | Jun 4, 2024 | Envoy is a cloud-native, open source edge and service proxy. There is a crash at `QuicheDataReader::PeekVarInt62Length()... |
| CVE-2024-32974 | HIGH | 7.5 | 0.7% | Jun 4, 2024 | Envoy is a cloud-native, open source edge and service proxy. A crash was observed in `EnvoyQuicServerStream::OnInitialHe... |
| CVE-2024-23326 | HIGH | 8.2 | 0.4% | Jun 4, 2024 | Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling vulnerability exists throug... |
| CVE-2024-4520 | HIGH | 7.5 | 0.5% | Jun 4, 2024 | An improper access control vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically in version 2... |
| CVE-2024-30525 | HIGH | 7.3 | 0.3% | Jun 4, 2024 | Missing Authorization vulnerability in moveaddons Move Addons for Elementor.This issue affects Move Addons for Elementor... |
| CVE-2024-36857 | HIGH | 7.5 | 2.1% | Jun 4, 2024 | Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. |
| CVE-2024-30484 | HIGH | 8.8 | 0.3% | Jun 4, 2024 | Missing Authorization vulnerability in RT Easy Builder – Advanced addons for Elementor.This issue affects RT Easy Builde... |
| CVE-2024-29152 | HIGH | 7.5 | 0.4% | Jun 4, 2024 | An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, ... |
| CVE-2024-25095 | HIGH | 7.5 | 0.4% | Jun 4, 2024 | Insertion of Sensitive Information into Log File vulnerability in Code Parrots Easy Forms for Mailchimp.This issue affec... |
| CVE-2024-36550 | HIGH | 8.8 | 0.2% | Jun 4, 2024 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=add&nohre... |
| CVE-2024-36549 | HIGH | 8.8 | 0.3% | Jun 4, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/vpsCompany_deal.php?mudi=rev&nohre... |
| CVE-2024-36548 | HIGH | 8.8 | 0.2% | Jun 4, 2024 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/vpsCompany_deal.php?mudi=del |
| CVE-2024-36547 | HIGH | 8.8 | 0.2% | Jun 4, 2024 | idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mud... |
| CVE-2024-32871 | HIGH | 7.5 | 0.8% | Jun 4, 2024 | Pimcore is an Open Source Data & Experience Management Platform. The Pimcore thumbnail generation can be used to flood t... |
| CVE-2024-28999 | HIGH | 7.5 | 13.9% | Jun 4, 2024 | The SolarWinds Platform was determined to be affected by a Race Condition Vulnerability affecting the web console. |
| CVE-2024-28996 | HIGH | 7.5 | 0.3% | Jun 4, 2024 | The SolarWinds Platform was determined to be affected by a SWQL Injection Vulnerability. Attack complexity is high for t... |
| CVE-2024-34792 | HIGH | 7.2 | 1.1% | Jun 4, 2024 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in dexta Dextaz Ping a... |
| CVE-2024-34554 | HIGH | 8.8 | 0.5% | Jun 4, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now