2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-40481 | MEDIUM | 5.4 | 0.6% | Aug 12, 2024 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Mana... |
| CVE-2024-40478 | MEDIUM | 5.4 | 0.6% | Aug 12, 2024 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1... |
| CVE-2024-40474 | MEDIUM | 5.4 | 0.5% | Aug 12, 2024 | A Reflected Cross Site Scripting (XSS) vulnerability was found in "edit-cate.php" in SourceCodester House Rental Managem... |
| CVE-2024-40473 | MEDIUM | 5.4 | 0.6% | Aug 12, 2024 | A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental M... |
| CVE-2024-38200 | MEDIUM | 6.5 | 19.7% | Aug 12, 2024 | Microsoft Office Spoofing Vulnerability |
| CVE-2024-37283 | MEDIUM | 6.5 | 0.6% | Aug 12, 2024 | An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the lo... |
| CVE-2024-36518 | MEDIUM | 5.4 | 3.1% | Aug 12, 2024 | Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface a... |
| CVE-2024-32765 | MEDIUM | 4.2 | 0.2% | Aug 12, 2024 | A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local ... |
| CVE-2024-22121 | MEDIUM | 6.1 | 0.2% | Aug 12, 2024 | A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integri... |
| CVE-2024-22114 | MEDIUM | 4.3 | 0.6% | Aug 12, 2024 | User with no permission to any of the Hosts can access and view host count & other statistics through System Information... |
| CVE-2024-21877 | MEDIUM | 6.5 | 0.8% | Aug 12, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in ... |
| CVE-2024-0115 | MEDIUM | 6.1 | 0.2% | Aug 12, 2024 | NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may caus... |
| CVE-2024-42493 | MEDIUM | 5.3 | 0.3% | Aug 8, 2024 | Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers an... |
| CVE-2024-7394 | MEDIUM | 4.8 | 0.4% | Aug 8, 2024 | Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue a... |
| CVE-2024-0102 | MEDIUM | 5.5 | 0.2% | Aug 8, 2024 | NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds... |
| CVE-2024-7480 | MEDIUM | 4.4 | 0.2% | Aug 8, 2024 | An Improper access control vulnerability was found in Avaya Aura System Manager which could allow a command-line interfa... |
| CVE-2024-7477 | MEDIUM | 6.7 | 0.2% | Aug 8, 2024 | A SQL injection vulnerability was found which could allow a command line interface (CLI) user with administrative privil... |
| CVE-2024-41238 | MEDIUM | 5.3 | 0.4% | Aug 8, 2024 | A SQL injection vulnerability in /smsa/student_login.php in Kashipara Responsive School Management System v1.0 allows an... |
| CVE-2024-42354 | MEDIUM | 5.9 | 0.4% | Aug 8, 2024 | Shopware is an open commerce platform. The store-API works with regular entities and not expose all fields for the publi... |
| CVE-2024-7610 | MEDIUM | 6.5 | 0.4% | Aug 8, 2024 | A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 15.9 before... |
| CVE-2024-7554 | MEDIUM | 6.5 | 0.4% | Aug 8, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.0.6, all versions start... |
| CVE-2024-5423 | MEDIUM | 6.5 | 0.5% | Aug 8, 2024 | Multiple Denial of Service (DoS) conditions has been discovered in GitLab CE/EE affecting all versions starting from 1.0... |
| CVE-2024-4207 | MEDIUM | 5.4 | 0.3% | Aug 8, 2024 | A cross-site scripting issue has been discovered in GitLab affecting all versions starting from 5.1 prior 17.0.6, starti... |
| CVE-2024-3958 | MEDIUM | 6.5 | 0.3% | Aug 8, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions before 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior ... |
| CVE-2024-3114 | MEDIUM | 6.5 | 0.5% | Aug 8, 2024 | An issue was discovered in GitLab CE/EE affecting all versions starting from 11.10 prior to 17.0.6, 17.1 prior to 17.1.4... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now