2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1988 | MEDIUM | 5.4 | 0.3% | Jun 7, 2024 | The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPre... |
| CVE-2024-5607 | MEDIUM | 5.4 | 0.3% | Jun 7, 2024 | The GDPR CCPA Compliance & Cookie Consent Banner plugin for WordPress is vulnerable to unauthorized modification of data... |
| CVE-2024-3987 | MEDIUM | 5.4 | 0.3% | Jun 7, 2024 | The WP Mobile Menu – The Mobile-Friendly Responsive Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripti... |
| CVE-2024-1768 | MEDIUM | 5.4 | 0.3% | Jun 7, 2024 | The Clever Fox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's info box block in all ... |
| CVE-2024-1689 | MEDIUM | 4.3 | 0.3% | Jun 7, 2024 | The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit... |
| CVE-2024-4013 | MEDIUM | 5.6 | 0.3% | Jun 6, 2024 | A bug exists in the API, mesh_node_power_off(), which fails to copy the contents of the Replay Protection List (RPL) fr... |
| CVE-2024-36775 | MEDIUM | 5.4 | 0.3% | Jun 6, 2024 | A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HT... |
| CVE-2024-22525 | MEDIUM | 5.5 | 0.2% | Jun 6, 2024 | dnspod-sr 0dfbd37 contains a SEGV. |
| CVE-2024-22524 | MEDIUM | 5.5 | 0.2% | Jun 6, 2024 | dnspod-sr 0dfbd37 is vulnerable to buffer overflow. |
| CVE-2024-36795 | MEDIUM | 4 | 0.3% | Jun 6, 2024 | Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories em... |
| CVE-2024-5550 | MEDIUM | 5.3 | 0.8% | Jun 6, 2024 | In h2oai/h2o-3 version 3.40.0.4, an exposure of sensitive information vulnerability exists due to an arbitrary system pa... |
| CVE-2024-5478 | MEDIUM | 6.1 | 0.3% | Jun 6, 2024 | A Cross-site Scripting (XSS) vulnerability exists in the SAML metadata endpoint `/auth/saml/${org?.id}/metadata` of luna... |
| CVE-2024-5278 | MEDIUM | 6.1 | 0.6% | Jun 6, 2024 | gaizhenbiao/chuanhuchatgpt is vulnerable to an unrestricted file upload vulnerability due to insufficient validation of ... |
| CVE-2024-5248 | MEDIUM | 6.5 | 0.5% | Jun 6, 2024 | In lunary-ai/lunary version 1.2.5, an improper access control vulnerability exists due to a missing permission check in ... |
| CVE-2024-5206 | MEDIUM | 4.7 | 0.2% | Jun 6, 2024 | A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to ... |
| CVE-2024-5131 | MEDIUM | 6.5 | 0.5% | Jun 6, 2024 | An Improper Access Control vulnerability exists in the lunary-ai/lunary repository, affecting versions up to and includi... |
| CVE-2024-5126 | MEDIUM | 6.5 | 0.3% | Jun 6, 2024 | An improper access control vulnerability exists in the lunary-ai/lunary repository, specifically within the versions.pat... |
| CVE-2024-4890 | MEDIUM | 4.9 | 0.6% | Jun 6, 2024 | A blind SQL injection vulnerability exists in the berriai/litellm application, specifically within the '/team/update' pr... |
| CVE-2024-3404 | MEDIUM | 6.5 | 0.5% | Jun 6, 2024 | In gaizhenbiao/chuanhuchatgpt, specifically the version tagged as 20240121, there exists a vulnerability due to improper... |
| CVE-2024-3402 | MEDIUM | 5.4 | 0.5% | Jun 6, 2024 | A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to ina... |
| CVE-2024-3153 | MEDIUM | 6.5 | 0.7% | Jun 6, 2024 | mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint... |
| CVE-2024-3102 | MEDIUM | 5.3 | 0.5% | Jun 6, 2024 | A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username ... |
| CVE-2024-3099 | MEDIUM | 5.4 | 0.4% | Jun 6, 2024 | A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploit... |
| CVE-2024-37364 | MEDIUM | 6.8 | 0.3% | Jun 6, 2024 | Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attac... |
| CVE-2024-37154 | MEDIUM | 5.3 | 0.4% | Jun 6, 2024 | Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not y... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now