2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-40633 | MEDIUM | 5.3 | 0.4% | Jul 17, 2024 | Sylius is an Open Source eCommerce Framework on Symfony. A security vulnerability was discovered in the `/api/v2/shop/ad... |
| CVE-2024-38446 | MEDIUM | 6.5 | 0.3% | Jul 17, 2024 | NATO NCI ANET 3.4.1 mishandles report ownership. A user can create a report and, despite the restrictions imposed by the... |
| CVE-2024-20416 | MEDIUM | 6.5 | 0.9% | Jul 17, 2024 | A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated,... |
| CVE-2024-20400 | MEDIUM | 4.7 | 0.4% | Jul 17, 2024 | A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote ... |
| CVE-2024-20396 | MEDIUM | 6.5 | 0.4% | Jul 17, 2024 | A vulnerability in the protocol handlers of Cisco Webex App could allow an unauthenticated, remote attacker to gain acce... |
| CVE-2024-6833 | MEDIUM | 5.9 | 0.1% | Jul 17, 2024 | A vulnerability in Zowe CLI allows local, privileged actors to store previously entered secure credentials in a plaintex... |
| CVE-2024-29120 | MEDIUM | 5.9 | 0.3% | Jul 17, 2024 | In Streampark (version < 2.1.4), when a user logged in successfully, the Backend service would return "Authorization" as... |
| CVE-2024-40617 | MEDIUM | 6.5 | 1.4% | Jul 17, 2024 | Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated atta... |
| CVE-2024-31979 | MEDIUM | 4.3 | 0.7% | Jul 17, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements.... |
| CVE-2024-29737 | MEDIUM | 4.7 | 1.1% | Jul 17, 2024 | In streampark, the project module integrates Maven's compilation capabilities. The input parameter validation is not str... |
| CVE-2024-5703 | MEDIUM | 4.3 | 0.4% | Jul 17, 2024 | The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin f... |
| CVE-2024-5582 | MEDIUM | 5.4 | 0.4% | Jul 17, 2024 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plug... |
| CVE-2024-39863 | MEDIUM | 5.4 | 1.0% | Jul 17, 2024 | Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious li... |
| CVE-2024-6669 | MEDIUM | 4.8 | 0.3% | Jul 17, 2024 | The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin setting... |
| CVE-2024-6033 | MEDIUM | 4.3 | 0.4% | Jul 17, 2024 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized ... |
| CVE-2024-5255 | MEDIUM | 5.4 | 0.3% | Jul 17, 2024 | The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ulti... |
| CVE-2024-5254 | MEDIUM | 5.4 | 0.3% | Jul 17, 2024 | The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ulti... |
| CVE-2024-5253 | MEDIUM | 5.4 | 0.3% | Jul 17, 2024 | The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ult_... |
| CVE-2024-5252 | MEDIUM | 5.4 | 0.3% | Jul 17, 2024 | The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ulti... |
| CVE-2024-5251 | MEDIUM | 5.4 | 0.3% | Jul 17, 2024 | The Ultimate Addons for WPBakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ulti... |
| CVE-2024-41010 | MEDIUM | 5.5 | 0.4% | Jul 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix too early release of tcx_entry Pedro Pint... |
| CVE-2024-41009 | MEDIUM | 5.5 | 0.3% | Jul 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The B... |
| CVE-2024-6535 | MEDIUM | 5.3 | 0.5% | Jul 17, 2024 | A flaw was found in Skupper. When Skupper is initialized with the console-enabled and with console-auth set to Openshift... |
| CVE-2024-6595 | MEDIUM | 5.3 | 0.5% | Jul 17, 2024 | An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 p... |
| CVE-2024-5500 | MEDIUM | 6.5 | 0.3% | Jul 16, 2024 | Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigat... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now