2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37286 | MEDIUM | 6.5 | 0.4% | Aug 3, 2024 | APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailable_sh... |
| CVE-2024-7437 | MEDIUM | 4.3 | 0.4% | Aug 3, 2024 | A vulnerability, which was classified as critical, was found in SimpleMachines SMF 2.1.4. Affected is an unknown functio... |
| CVE-2024-38321 | MEDIUM | 6.5 | 0.4% | Aug 3, 2024 | IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log file... |
| CVE-2024-6872 | MEDIUM | 5.4 | 0.3% | Aug 3, 2024 | The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for ... |
| CVE-2024-6709 | MEDIUM | 4.3 | 0.3% | Aug 3, 2024 | The Sync Post With Other Site plugin for WordPress is vulnerable to unauthorized modification of data due to a missing c... |
| CVE-2024-7356 | MEDIUM | 5.4 | 0.3% | Aug 3, 2024 | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘filename’ paramete... |
| CVE-2024-6390 | MEDIUM | 5.9 | 0.3% | Aug 3, 2024 | The Quiz and Survey Master (QSM) WordPress plugin before 9.1.0 does not properly sanitise and escape some of its Quizz ... |
| CVE-2024-7319 | MEDIUM | 5 | 0.4% | Aug 2, 2024 | An incomplete fix for CVE-2023-1625 was found in openstack-heat. Sensitive information may possibly be disclosed through... |
| CVE-2024-42349 | MEDIUM | 5.3 | 0.6% | Aug 2, 2024 | FOG is a cloning/imaging/rescue suite/inventory management system. FOG Server 1.5.10.41.4 and earlier can leak authorize... |
| CVE-2024-38888 | MEDIUM | 6.8 | 0.2% | Aug 2, 2024 | An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows... |
| CVE-2024-33895 | MEDIUM | 6.6 | 0.5% | Aug 2, 2024 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the conf... |
| CVE-2024-33893 | MEDIUM | 6.1 | 0.7% | Aug 2, 2024 | Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displayin... |
| CVE-2024-41519 | MEDIUM | 5.4 | 0.4% | Aug 2, 2024 | Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltunge... |
| CVE-2024-41517 | MEDIUM | 5.3 | 0.6% | Aug 2, 2024 | An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.... |
| CVE-2024-7323 | MEDIUM | 6.5 | 0.6% | Aug 2, 2024 | Digiwin EasyFlow .NET lacks proper access control for specific functionality, and the functionality do not adequately fi... |
| CVE-2024-7204 | MEDIUM | 6.1 | 0.3% | Aug 2, 2024 | Ai3 QbiBot does not properly filter user input, allowing unauthenticated remote attackers to insert JavaScript code into... |
| CVE-2024-6704 | MEDIUM | 6.1 | 0.5% | Aug 2, 2024 | The Comments – wpDiscuz plugin for WordPress is vulnerable to HTML Injection in all versions up to, and including, 7.6.2... |
| CVE-2024-40723 | MEDIUM | 4.3 | 0.5% | Aug 2, 2024 | The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the ... |
| CVE-2024-40722 | MEDIUM | 4.3 | 0.5% | Aug 2, 2024 | The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate th... |
| CVE-2024-38878 | MEDIUM | 6.5 | 11.5% | Aug 2, 2024 | A vulnerability has been identified in Omnivise T3000 Application Server R9.2 (All versions), Omnivise T3000 R8.2 SP3 (A... |
| CVE-2024-4643 | MEDIUM | 5.4 | 0.4% | Aug 2, 2024 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W... |
| CVE-2024-40719 | MEDIUM | 6.5 | 0.2% | Aug 2, 2024 | The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is ins... |
| CVE-2024-27182 | MEDIUM | 4.9 | 0.7% | Aug 2, 2024 | In Apache Linkis <= 1.5.0, Arbitrary file deletion in Basic management services on A user with an administrator accou... |
| CVE-2024-42460 | MEDIUM | 5.3 | 0.5% | Aug 2, 2024 | In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because there is a missing check for whet... |
| CVE-2024-42459 | MEDIUM | 5.3 | 0.3% | Aug 2, 2024 | In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing signature leng... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now