2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-36428 | HIGH | 8.1 | 1.7% | May 27, 2024 | OrangeHRM 3.3.3 allows admin/viewProjects sortOrder SQL injection. |
| CVE-2024-36426 | HIGH | 7.5 | 0.3% | May 27, 2024 | In TARGIT Decision Suite 23.2.15007.0 before Autumn 2023, the session token is part of the URL and may be sent in a clea... |
| CVE-2024-29415 | HIGH | 8.1 | 8.3% | May 27, 2024 | The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2... |
| CVE-2024-35182 | HIGH | 8.1 | 1.6% | May 27, 2024 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur... |
| CVE-2024-35181 | HIGH | 8.1 | 1.6% | May 27, 2024 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur... |
| CVE-2024-35237 | HIGH | 7.5 | 0.5% | May 27, 2024 | MIT IdentiBot is an open-source Discord bot written in Node.js that verifies individuals' affiliations with MIT, grants ... |
| CVE-2024-35231 | HIGH | 8.6 | 0.7% | May 27, 2024 | rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-... |
| CVE-2024-35219 | HIGH | 8.3 | 3.6% | May 27, 2024 | OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configurat... |
| CVE-2024-34477 | HIGH | 7.8 | 0.3% | May 27, 2024 | configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafte... |
| CVE-2024-5035 | HIGH | 8.8 | 3.2% | May 27, 2024 | The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ... |
| CVE-2024-5403 | HIGH | 7.2 | 0.6% | May 27, 2024 | ASKEY 5G NR Small Cell fails to properly filter user input for certain functionality, allowing remote attackers with adm... |
| CVE-2024-5400 | HIGH | 8.8 | 0.6% | May 27, 2024 | Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can expl... |
| CVE-2024-4535 | HIGH | 8.8 | 0.3% | May 27, 2024 | The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF checks in some places, which could allow at... |
| CVE-2024-4531 | HIGH | 7.1 | 0.3% | May 27, 2024 | The Business Card WordPress plugin through 1.0.0 does not have CSRF checks in some places, which could allow attackers t... |
| CVE-2024-3933 | HIGH | 7.3 | 0.2% | May 27, 2024 | In Eclipse OpenJ9 release versions prior to 0.44.0 and after 0.13.0, when running with JVM option -Xgc:concurrentScaveng... |
| CVE-2024-5399 | HIGH | 7.2 | 0.6% | May 27, 2024 | Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges c... |
| CVE-2024-5397 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability classified as critical was found in itsourcecode Online Student Enrollment System 1.0. Affected by this ... |
| CVE-2024-5396 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability classified as critical has been found in itsourcecode Online Student Enrollment System 1.0. Affected is ... |
| CVE-2024-5395 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issu... |
| CVE-2024-5394 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been declared as critical. This v... |
| CVE-2024-5393 | HIGH | 8.8 | 0.5% | May 27, 2024 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been classified as critical. This... |
| CVE-2024-5392 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability was found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected by t... |
| CVE-2024-5391 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability has been found in itsourcecode Online Student Enrollment System 1.0 and classified as critical. Affected... |
| CVE-2024-5390 | HIGH | 8.8 | 0.6% | May 27, 2024 | A vulnerability, which was classified as critical, was found in itsourcecode Online Student Enrollment System 1.0. Affec... |
| CVE-2024-5381 | HIGH | 8.8 | 0.6% | May 26, 2024 | A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Affected by ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now