2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-50830 | HIGH | 7.2 | 0.4% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/calendar_of_events.php in kashipara E-learning Management System Proje... |
| CVE-2024-50829 | HIGH | 7.2 | 0.4% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/edit_subject.php in kashipara E-learning Management System Project 1.0... |
| CVE-2024-50828 | HIGH | 7.2 | 0.4% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/edit_department.php in kashipara E-learning Management System Project ... |
| CVE-2024-50827 | HIGH | 7.2 | 0.4% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/add_subject.php in kashipara E-learning Management System Project 1.0 ... |
| CVE-2024-50826 | HIGH | 7.2 | 0.4% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/add_content.php in kashipara E-learning Management System Project 1.0 ... |
| CVE-2024-50825 | HIGH | 7.2 | 0.4% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/school_year.php in kashipara E-learning Management System Project 1.0 ... |
| CVE-2024-50824 | HIGH | 7.2 | 0.5% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via th... |
| CVE-2024-50823 | CRITICAL | 9.8 | 0.5% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via th... |
| CVE-2024-4343 | CRITICAL | 9.8 | 2.6% | Nov 14, 2024 | A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/... |
| CVE-2024-4311 | MEDIUM | 5.4 | 0.5% | Nov 14, 2024 | zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password chan... |
| CVE-2024-49362 | CRITICAL | 9.6 | 1.0% | Nov 14, 2024 | Joplin is a free, open source note taking and to-do application. Joplin-desktop has a vulnerability that leads to remote... |
| CVE-2024-48284 | MEDIUM | 4.8 | 0.5% | Nov 14, 2024 | A Reflected Cross-Site Scripting (XSS) vulnerability was found in the /search-result.php page of the PHPGurukul User Reg... |
| CVE-2024-3502 | HIGH | 8.1 | 0.4% | Nov 14, 2024 | In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists where account rec... |
| CVE-2024-3501 | HIGH | 8.1 | 0.4% | Nov 14, 2024 | In lunary-ai/lunary versions up to and including 1.2.5, an information disclosure vulnerability exists due to the inclus... |
| CVE-2024-3379 | HIGH | 8.1 | 0.4% | Nov 14, 2024 | In lunary-ai/lunary versions 1.2.2 through 1.2.6, an incorrect authorization vulnerability allows unprivileged users to ... |
| CVE-2024-1682 | MEDIUM | 4.3 | 0.4% | Nov 14, 2024 | An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This ... |
| CVE-2024-6068 | HIGH | 7.3 | 0.2% | Nov 14, 2024 | A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can explo... |
| CVE-2024-50836 | MEDIUM | 4.8 | 0.5% | Nov 14, 2024 | A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/teachers.php in KASHIPARA E-learning Management Sy... |
| CVE-2024-50835 | HIGH | 7.2 | 0.6% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0... |
| CVE-2024-50834 | HIGH | 7.2 | 0.6% | Nov 14, 2024 | A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname... |
| CVE-2024-50833 | CRITICAL | 9.8 | 0.6% | Nov 14, 2024 | A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the user... |
| CVE-2024-50832 | HIGH | 7.2 | 0.6% | Nov 14, 2024 | A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 v... |
| CVE-2024-37285 | HIGH | 7.2 | 1.3% | Nov 14, 2024 | A deserialization issue in Kibana can lead to arbitrary code execution when Kibana attempts to parse a YAML document con... |
| CVE-2024-52505 | MEDIUM | 5.4 | 0.4% | Nov 14, 2024 | matrix-appservice-irc is a Node.js IRC bridge for the Matrix messaging protocol. The provisioning API of the matrix-apps... |
| CVE-2024-52302 | HIGH | 8.7 | 3.2% | Nov 14, 2024 | common-user-management is a robust Spring Boot application featuring user management services designed to control user a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now