2024 CVE Vulnerabilities

39,268 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-42188MEDIUM4.6HCL Connections is vulnerable to a broken access control vulnerability that may allow an unauthorized user to update dat...
CVE-2024-11214HIGH7.2A vulnerability has been found in SourceCodester Best Employee Management System 1.0 and classified as critical. This vu...
CVE-2024-11213HIGH7.2A vulnerability, which was classified as critical, was found in SourceCodester Best Employee Management System 1.0. This...
CVE-2024-11136HIGH8.2The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application ...
CVE-2024-10921HIGH8.1An authorized user may trigger crashes or receive the contents of buffer over-reads of Server memory by issuing speciall...
CVE-2024-7124MEDIUM5.3Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'fil...
CVE-2024-50838MEDIUM5.4A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/department.php in KASHIPARA E-learning Management ...
CVE-2024-50837MEDIUM5.4A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/admin_user.php in KASHIPARA E-learning Management ...
CVE-2024-11212HIGH8.8A vulnerability, which was classified as critical, has been found in SourceCodester Best Employee Management System 1.0....
CVE-2024-11211HIGH7.2A vulnerability classified as critical has been found in EyouCMS up to 1.6.7. Affected is an unknown function of the com...
CVE-2024-11210MEDIUM5.4A vulnerability was found in EyouCMS 1.51. It has been rated as critical. This issue affects the function editFile of th...
CVE-2024-9633HIGH7.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions start...
CVE-2024-50843MEDIUM5.3A Directory listing issue was found in PHPGurukul User Registration & Login and User Management System 3.2, which allows...
CVE-2024-50842MEDIUM5.4A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/school_year.php in KASHIPARA E-learning Management...
CVE-2024-50841MEDIUM5.4A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/calendar_of_events.php in KASHIPARA E-learning Man...
CVE-2024-50840MEDIUM5.4A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/class.php in KASHIPARA E-learning Management Syste...
CVE-2024-50839MEDIUM5.4A Stored Cross-Site Scripting (XSS) vulnerability was found in /admin/add_subject.php in KASHIPARA E-learning Management...
CVE-2024-11215MEDIUM6.5Absolute path traversal (incorrect restriction of a path to a restricted directory) vulnerability in the EasyPHP web ser...
CVE-2024-11209CRITICAL9.8A vulnerability was found in Apereo CAS 6.6. It has been classified as critical. This affects an unknown part of the fil...
CVE-2024-11208HIGH8.1A vulnerability was found in Apereo CAS 6.6 and classified as problematic. Affected by this issue is some unknown functi...
CVE-2024-10962HIGH8.8The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to PHP Object Injection in all versions up t...
CVE-2024-8648MEDIUM6.1An issue has been discovered in GitLab CE/EE affecting all versions from 16 before 17.3.7, 17.4 before 17.4.4, and 17.5 ...
CVE-2024-7404MEDIUM6.5An issue was discovered in GitLab CE/EE affecting all versions starting from 17.2 prior to 17.3.7, starting from 17.4 pr...
CVE-2024-11207MEDIUM5.4A vulnerability has been found in Apereo CAS 6.6 and classified as problematic. Affected by this vulnerability is an unk...
CVE-2024-10979HIGH8.8Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitiv...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now