2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-3101 | HIGH | 7.2 | 0.8% | Apr 10, 2024 | In mintplex-labs/anything-llm, an improper input validation vulnerability allows attackers to escalate privileges by dea... |
| CVE-2024-31356 | HIGH | 7.6 | 0.5% | Apr 10, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech Us... |
| CVE-2024-31355 | HIGH | 8.5 | 0.5% | Apr 10, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slidesho... |
| CVE-2024-31343 | HIGH | 7.5 | 0.6% | Apr 10, 2024 | Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue aff... |
| CVE-2024-31299 | HIGH | 7.1 | 0.3% | Apr 10, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Reservation Diary ReDi Restaurant Reservation allows Cross-Site Scrip... |
| CVE-2024-2217 | HIGH | 7.5 | 0.8% | Apr 10, 2024 | gaizhenbiao/chuanhuchatgpt is vulnerable to improper access control, allowing unauthorized access to the `config.json` f... |
| CVE-2024-2196 | HIGH | 8.8 | 0.5% | Apr 10, 2024 | aimhubio/aim is vulnerable to Cross-Site Request Forgery (CSRF), allowing attackers to perform actions such as deleting ... |
| CVE-2024-1902 | HIGH | 7.5 | 0.4% | Apr 10, 2024 | lunary-ai/lunary is vulnerable to a session reuse attack, allowing a removed user to change the organization name withou... |
| CVE-2024-1728 | HIGH | 7.5 | 85.4% | Apr 10, 2024 | gradio-app/gradio is vulnerable to a local file inclusion vulnerability due to improper validation of user-supplied inpu... |
| CVE-2024-31873 | HIGH | 7.5 | 1.2% | Apr 10, 2024 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own inb... |
| CVE-2024-31872 | HIGH | 8.1 | 0.6% | Apr 10, 2024 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle ... |
| CVE-2024-31871 | HIGH | 8.1 | 0.6% | Apr 10, 2024 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle ... |
| CVE-2024-31358 | HIGH | 7.5 | 0.6% | Apr 10, 2024 | Missing Authorization vulnerability in Saleswonder Team: Tobias 5 Stars Rating Funnel 5-stars-rating-funnel.This issue a... |
| CVE-2024-31298 | HIGH | 7.5 | 0.5% | Apr 10, 2024 | Insertion of Sensitive Information into Log File vulnerability in Joel Hardi User Spam Remover.This issue affects User S... |
| CVE-2024-31259 | HIGH | 7.5 | 0.6% | Apr 10, 2024 | Insertion of Sensitive Information into Log File vulnerability in Searchiq SearchIQ.This issue affects SearchIQ: from n/... |
| CVE-2024-31254 | HIGH | 7.5 | 0.5% | Apr 10, 2024 | Insertion of Sensitive Information into Log File vulnerability in WebToffee WordPress Backup & Migration.This issue affe... |
| CVE-2024-31249 | HIGH | 7.5 | 0.5% | Apr 10, 2024 | Insertion of Sensitive Information into Log File vulnerability in WPKube Subscribe To Comments Reloaded.This issue affec... |
| CVE-2024-31247 | HIGH | 7.5 | 0.5% | Apr 10, 2024 | Insertion of Sensitive Information into Log File vulnerability in Frédéric GILLES FG Drupal to WordPress.This issue affe... |
| CVE-2024-31245 | HIGH | 7.5 | 0.5% | Apr 10, 2024 | Insertion of Sensitive Information into Log File vulnerability in ConvertKit.This issue affects ConvertKit: from n/a thr... |
| CVE-2024-31240 | HIGH | 8.1 | 0.7% | Apr 10, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in InfoTheme WP Poll Maker.... |
| CVE-2024-0218 | HIGH | 8.2 | 0.6% | Apr 10, 2024 | A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fiel... |
| CVE-2024-27474 | HIGH | 8.8 | 0.7% | Apr 10, 2024 | Leantime 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF). This vulnerability allows malicious actors to perform... |
| CVE-2024-24809 | HIGH | 8.5 | 54.4% | Apr 10, 2024 | Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnerable to path traversal and unrestricted u... |
| CVE-2024-31492 | HIGH | 7.8 | 0.3% | Apr 10, 2024 | An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.... |
| CVE-2024-20772 | HIGH | 7.8 | 0.6% | Apr 10, 2024 | Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now