2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41108 | MEDIUM | 5.9 | 0.6% | Jul 31, 2024 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. The hostinfo page has missing/improp... |
| CVE-2024-6977 | MEDIUM | 6.5 | 0.2% | Jul 31, 2024 | A vulnerability in Cato Networks SDP Client on Windows allows the insertion of sensitive information into the log file, ... |
| CVE-2024-41953 | MEDIUM | 6.1 | 0.6% | Jul 31, 2024 | Zitadel is an open source identity management system. ZITADEL uses HTML for emails and renders certain information such ... |
| CVE-2024-41952 | MEDIUM | 5.3 | 0.6% | Jul 31, 2024 | Zitadel is an open source identity management system. ZITADEL administrators can enable a setting called "Ignoring unkno... |
| CVE-2024-41947 | MEDIUM | 5.4 | 1.6% | Jul 31, 2024 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a c... |
| CVE-2024-39694 | MEDIUM | 4.7 | 0.5% | Jul 31, 2024 | Duende IdentityServer is an OpenID Connect and OAuth 2.x framework for ASP.NET Core. It is possible for an attacker to c... |
| CVE-2024-39318 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | The Ibexa Admin UI Bundle contains all the necessary parts to run the Ibexa DXP Back Office interface. The file upload w... |
| CVE-2024-37900 | MEDIUM | 4.6 | 14.8% | Jul 31, 2024 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When uploading ... |
| CVE-2024-37898 | MEDIUM | 4.3 | 0.4% | Jul 31, 2024 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When a user has... |
| CVE-2024-3082 | MEDIUM | 4.6 | 0.1% | Jul 31, 2024 | A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical acces... |
| CVE-2024-37135 | MEDIUM | 4.4 | 0.1% | Jul 31, 2024 | DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potential... |
| CVE-2024-31203 | MEDIUM | 5.5 | 0.1% | Jul 31, 2024 | A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer al... |
| CVE-2024-31201 | MEDIUM | 6.7 | 0.2% | Jul 31, 2024 | A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIP_Scrutation service. Such misconfiguration could be... |
| CVE-2024-31200 | MEDIUM | 4.6 | 0.2% | Jul 31, 2024 | A “CWE-201: Insertion of Sensitive Information Into Sent Data” affecting the administrative account allows an attacker w... |
| CVE-2024-31199 | MEDIUM | 6.1 | 0.3% | Jul 31, 2024 | A “CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')” allows malicious users ... |
| CVE-2024-6208 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdm_all_packag... |
| CVE-2024-39379 | MEDIUM | 5.5 | 0.3% | Jul 31, 2024 | Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead ... |
| CVE-2024-7321 | MEDIUM | 6.1 | 0.5% | Jul 31, 2024 | A vulnerability classified as problematic was found in itsourcecode Online Blood Bank Management System 1.0. This vulner... |
| CVE-2024-7135 | MEDIUM | 6.5 | 2.7% | Jul 31, 2024 | The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ... |
| CVE-2024-6725 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | The Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder plugin for Word... |
| CVE-2024-7310 | MEDIUM | 6.1 | 0.4% | Jul 31, 2024 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been declared as problematic. This vuln... |
| CVE-2024-7309 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This af... |
| CVE-2024-2508 | MEDIUM | 5.3 | 0.4% | Jul 31, 2024 | The WP Mobile Menu plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c... |
| CVE-2024-7303 | MEDIUM | 5.4 | 0.5% | Jul 31, 2024 | A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. Thi... |
| CVE-2024-7264 | MEDIUM | 6.5 | 16.2% | Jul 31, 2024 | libcurl's ASN1 parser code has the `GTime2str()` function, used for parsing an ASN.1 Generalized Time field. If given an... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now