2024 CVE Vulnerabilities
39,236 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-23941 | MEDIUM | 5.4 | 0.6% | Feb 1, 2024 | Cross-site scripting vulnerability exists in Group Office prior to v6.6.182, prior to v6.7.64 and prior to v6.8.31, whic... |
| CVE-2024-0831 | MEDIUM | 6.5 | 0.8% | Feb 1, 2024 | Vault and Vault Enterprise (“Vault”) may expose sensitive information when enabling an audit device which specifies the ... |
| CVE-2024-24572 | MEDIUM | 6.5 | 0.6% | Jan 31, 2024 | facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, the $_REQUE... |
| CVE-2024-24571 | MEDIUM | 5.4 | 0.4% | Jan 31, 2024 | facileManager is a modular suite of web apps built with the sysadmin in mind. For the facileManager web application vers... |
| CVE-2024-23650 | MEDIUM | 5.3 | 1.0% | Jan 31, 2024 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A... |
| CVE-2024-22159 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in realmag777 WOLF – ... |
| CVE-2024-22158 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PeepSo Community b... |
| CVE-2024-22153 | MEDIUM | 4.8 | 0.4% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood & Al... |
| CVE-2024-22150 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PWR Plugins Portfo... |
| CVE-2024-22146 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magazine3 Schema &... |
| CVE-2024-1111 | MEDIUM | 6.1 | 0.4% | Jan 31, 2024 | A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affecte... |
| CVE-2024-23637 | MEDIUM | 4.9 | 0.5% | Jan 31, 2024 | OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability th... |
| CVE-2024-22297 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeboxr CBX Map f... |
| CVE-2024-22295 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RoboSoft Photo Gal... |
| CVE-2024-22293 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrea Tarantini B... |
| CVE-2024-22292 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delower WP To Do a... |
| CVE-2024-22289 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CyberNetikz Post v... |
| CVE-2024-22286 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aluka BA Plus – Be... |
| CVE-2024-22282 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Torbert Si... |
| CVE-2024-22163 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shield Security Sh... |
| CVE-2024-22162 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM WPZOOM Shor... |
| CVE-2024-22161 | MEDIUM | 4.8 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Harmonic Design HD... |
| CVE-2024-22160 | MEDIUM | 6.1 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bradley B. Dalina ... |
| CVE-2024-24566 | MEDIUM | 5.3 | 0.5% | Jan 31, 2024 | Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system.... |
| CVE-2024-22310 | MEDIUM | 5.4 | 0.3% | Jan 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Formzu Inc. Formzu... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now