2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48208 | HIGH | 8.6 | 1.5% | Oct 24, 2024 | pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the... |
| CVE-2024-47883 | CRITICAL | 9.1 | 1.6% | Oct 24, 2024 | The OpenRefine fork of the MIT Simile Butterfly server is a modular web application framework. The Butterfly framework u... |
| CVE-2024-47882 | MEDIUM | 6.1 | 0.5% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went... |
| CVE-2024-47881 | HIGH | 8.8 | 0.7% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.... |
| CVE-2024-47880 | MEDIUM | 6.9 | 0.4% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `export-rows` command ca... |
| CVE-2024-47879 | HIGH | 8.8 | 0.4% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request f... |
| CVE-2024-47878 | MEDIUM | 6.1 | 0.4% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `/extension/gdata/author... |
| CVE-2024-45263 | HIGH | 8.8 | 0.3% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upl... |
| CVE-2024-45262 | HIGH | 8.8 | 0.6% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The par... |
| CVE-2024-45261 | HIGH | 8 | 0.5% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The SID... |
| CVE-2024-45260 | HIGH | 8 | 3.9% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. Users w... |
| CVE-2024-10327 | HIGH | 8.1 | 0.6% | Oct 24, 2024 | A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification respo... |
| CVE-2024-45259 | MEDIUM | 6.5 | 0.2% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. By inte... |
| CVE-2024-45242 | HIGH | 7.8 | 34.7% | Oct 24, 2024 | EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metachar... |
| CVE-2024-48454 | HIGH | 7.2 | 0.9% | Oct 24, 2024 | An issue in SourceCodester Purchase Order Management System v1.0 allows a remote attacker to execute arbitrary code via ... |
| CVE-2024-48427 | HIGH | 8.8 | 0.9% | Oct 24, 2024 | A SQL injection vulnerability in Sourcecodester Packers and Movers Management System v1.0 allows remote authenticated us... |
| CVE-2024-48145 | CRITICAL | 9.1 | 0.5% | Oct 24, 2024 | A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to a... |
| CVE-2024-48144 | CRITICAL | 9.1 | 0.5% | Oct 24, 2024 | A prompt injection vulnerability in the chatbox of Fusion Chat Chat AI Assistant Ask Me Anything v1.2.4.0 allows attacke... |
| CVE-2024-48143 | CRITICAL | 9.1 | 0.4% | Oct 24, 2024 | A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers t... |
| CVE-2024-48142 | HIGH | 7.5 | 0.4% | Oct 24, 2024 | A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica ChatGPT AI Assistant v2.4.0 allows at... |
| CVE-2024-48141 | HIGH | 7.5 | 0.4% | Oct 24, 2024 | A prompt injection vulnerability in the chatbox of Zhipu AI CodeGeeX v2.17.0 allows attackers to access and exfiltrate a... |
| CVE-2024-48140 | HIGH | 7.5 | 0.4% | Oct 24, 2024 | A prompt injection vulnerability in the chatbox of Butterfly Effect Limited Monica Your AI Copilot powered by ChatGPT4 v... |
| CVE-2024-48139 | HIGH | 7.5 | 0.5% | Oct 24, 2024 | A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all pre... |
| CVE-2024-47173 | MEDIUM | 5.5 | 0.3% | Oct 24, 2024 | Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version ... |
| CVE-2024-46998 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | baserCMS is a website development framework. Versions prior to 5.1.2 have a cross-site scripting vulnerability in the Ed... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now