2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-28029 | HIGH | 8.8 | 0.7% | Mar 21, 2024 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authoriza... |
| CVE-2024-27921 | HIGH | 8.8 | 60.6% | Mar 21, 2024 | Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identif... |
| CVE-2024-25937 | HIGH | 8.8 | 8.5% | Mar 21, 2024 | SQL injection vulnerability exists in the script DIAE_tagHandler.ashx. |
| CVE-2024-24272 | HIGH | 7.1 | 0.2% | Mar 21, 2024 | An issue in iTop DualSafe Password Manager & Digital Vault before 1.4.24 allows a local attacker to obtain sensitive inf... |
| CVE-2024-2764 | HIGH | 8.8 | 1.5% | Mar 21, 2024 | A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formS... |
| CVE-2024-2763 | HIGH | 8.8 | 1.5% | Mar 21, 2024 | A vulnerability, which was classified as critical, has been found in Tenda AC10U 15.03.06.48. Affected by this issue is ... |
| CVE-2024-29180 | HIGH | 7.5 | 1.2% | Mar 21, 2024 | Prior to versions 7.1.0, 6.1.2, and 5.3.4, the webpack-dev-middleware development middleware for devpack does not valida... |
| CVE-2024-27964 | HIGH | 8.8 | 0.6% | Mar 21, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: ... |
| CVE-2024-27190 | HIGH | 8.8 | 0.4% | Mar 21, 2024 | Missing Authorization vulnerability in Jean-David Daviet Download Media.This issue affects Download Media: from n/a thro... |
| CVE-2024-2465 | HIGH | 7.1 | 0.5% | Mar 21, 2024 | Open redirection vulnerability in CDeX application allows to redirect users to arbitrary websites via a specially crafte... |
| CVE-2024-2463 | HIGH | 8 | 0.6% | Mar 21, 2024 | Weak password recovery mechanism in CDeX application allows to retrieve password reset token.This issue affects CDeX app... |
| CVE-2024-27994 | HIGH | 7.1 | 0.4% | Mar 21, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooC... |
| CVE-2024-27993 | HIGH | 7.1 | 0.4% | Mar 21, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in typps Calendarista... |
| CVE-2024-29880 | HIGH | 7.8 | 0.2% | Mar 21, 2024 | In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running... |
| CVE-2024-1394 | HIGH | 7.5 | 1.5% | Mar 21, 2024 | A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion ... |
| CVE-2024-29131 | HIGH | 7.3 | 2.1% | Mar 21, 2024 | Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from ... |
| CVE-2024-2754 | HIGH | 8.8 | 0.8% | Mar 21, 2024 | A vulnerability classified as critical has been found in SourceCodester Complete E-Commerce Site 1.0. Affected is an unk... |
| CVE-2024-2162 | HIGH | 8.8 | 2.1% | Mar 21, 2024 | An OS Command Injection vulnerability in Kiloview NDI allows a low-privileged user to execute arbitrary code remotely on... |
| CVE-2024-29862 | HIGH | 7.5 | 0.7% | Mar 21, 2024 | The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wr... |
| CVE-2024-1538 | HIGH | 8.8 | 10.7% | Mar 21, 2024 | The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, ... |
| CVE-2024-2053 | HIGH | 7.5 | 44.6% | Mar 21, 2024 | The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users... |
| CVE-2024-2016 | HIGH | 8.8 | 1.0% | Mar 21, 2024 | A vulnerability, which was classified as critical, was found in ZhiCms 4.0. Affected is the function index of the file a... |
| CVE-2024-2015 | HIGH | 8.8 | 0.8% | Mar 21, 2024 | A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getinde... |
| CVE-2024-2007 | HIGH | 8.8 | 0.3% | Mar 21, 2024 | A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is a... |
| CVE-2024-28286 | HIGH | 7.5 | 0.7% | Mar 21, 2024 | In mz-automation libiec61850 v1.4.0, a NULL Pointer Dereference was detected in the mmsServer_handleFileCloseRequest.c f... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now