2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20369 | MEDIUM | 6.1 | 0.3% | May 15, 2024 | A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow... |
| CVE-2024-20258 | MEDIUM | 6.1 | 0.3% | May 15, 2024 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a... |
| CVE-2024-20257 | MEDIUM | 4.8 | 0.3% | May 15, 2024 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway could all... |
| CVE-2024-20256 | MEDIUM | 4.8 | 0.3% | May 15, 2024 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager a... |
| CVE-2024-4837 | MEDIUM | 5.3 | 0.4% | May 15, 2024 | In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gai... |
| CVE-2024-4357 | MEDIUM | 6.5 | 0.7% | May 15, 2024 | An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earli... |
| CVE-2024-3892 | MEDIUM | 6.7 | 0.2% | May 15, 2024 | A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.... |
| CVE-2024-28087 | MEDIUM | 6.5 | 0.3% | May 15, 2024 | In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions ... |
| CVE-2024-27593 | MEDIUM | 5.4 | 0.3% | May 15, 2024 | A stored cross-site scripting (XSS) vulnerability in the Filter function of Eramba Version 3.22.3 Community Edition allo... |
| CVE-2024-4903 | MEDIUM | 6.3 | 0.4% | May 15, 2024 | A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code o... |
| CVE-2024-3318 | MEDIUM | 4.2 | 0.4% | May 15, 2024 | A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authent... |
| CVE-2024-3317 | MEDIUM | 6.5 | 0.4% | May 15, 2024 | An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authen... |
| CVE-2024-35179 | MEDIUM | 6.8 | 0.6% | May 15, 2024 | Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user... |
| CVE-2024-31216 | MEDIUM | 5.1 | 0.2% | May 15, 2024 | The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, ... |
| CVE-2024-34954 | MEDIUM | 6.1 | 0.3% | May 15, 2024 | Code-projects Budget Management 1.0 is vulnerable to Cross Site Scripting (XSS) via the budget parameter. |
| CVE-2024-2248 | MEDIUM | 6.4 | 0.3% | May 15, 2024 | A Header Injection vulnerability in the JFrog platform in versions below 7.85.0 (SaaS) and 7.84.7 (Self-Hosted) may allo... |
| CVE-2024-4702 | MEDIUM | 5.4 | 0.3% | May 15, 2024 | The Mega Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button widget in al... |
| CVE-2024-34101 | MEDIUM | 5.5 | 0.5% | May 15, 2024 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerabili... |
| CVE-2024-30312 | MEDIUM | 5.5 | 1.8% | May 15, 2024 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerabili... |
| CVE-2024-30311 | MEDIUM | 5.5 | 2.0% | May 15, 2024 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier Answer: are affected by an out-of-bounds read vulnerabili... |
| CVE-2024-4636 | MEDIUM | 6.4 | 0.4% | May 15, 2024 | The Image Optimization by Optimole – Lazy Load, CDN, Convert WebP & AVIF plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2024-3824 | MEDIUM | 5.5 | 0.2% | May 15, 2024 | The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check in place when resetting its settings,... |
| CVE-2024-3822 | MEDIUM | 4.8 | 0.7% | May 15, 2024 | The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and escape a parameter before outputting it ... |
| CVE-2024-3749 | MEDIUM | 6.5 | 0.5% | May 15, 2024 | The SP Project & Document Manager WordPress plugin through 4.71 lacks proper access controllers and allows a logged in u... |
| CVE-2024-3748 | MEDIUM | 6.5 | 0.4% | May 15, 2024 | The SP Project & Document Manager WordPress plugin through 4.71 is missing validation in its upload function, allowing a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now