2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9847 | HIGH | 8 | 0.3% | Mar 20, 2025 | FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable... |
| CVE-2024-9840 | — | — | — | Mar 20, 2025 | Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a duplicate of CVE-2024-53981. N... |
| CVE-2024-9701 | CRITICAL | 9.8 | 1.0% | Mar 20, 2025 | A Remote Code Execution (RCE) vulnerability has been identified in the Kedro ShelveStore class (version 0.19.8). This vu... |
| CVE-2024-9699 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to... |
| CVE-2024-9617 | MEDIUM | 6.5 | 1.6% | Mar 20, 2025 | An IDOR vulnerability in danswer-ai/danswer v0.3.94 allows an attacker to view any files. The application does not verif... |
| CVE-2024-9612 | MEDIUM | 6.5 | 0.7% | Mar 20, 2025 | In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search p... |
| CVE-2024-9606 | HIGH | 7.5 | 0.7% | Mar 20, 2025 | In berriai/litellm before version 1.44.12, the `litellm/litellm_core_utils/litellm_logging.py` file contains a vulnerabi... |
| CVE-2024-9597 | HIGH | 7.1 | 0.3% | Mar 20, 2025 | A Path Traversal vulnerability exists in the `/wipe_database` endpoint of parisneo/lollms version v12, allowing an attac... |
| CVE-2024-9447 | MEDIUM | 6.5 | 0.6% | Mar 20, 2025 | An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The `/get/organisat... |
| CVE-2024-9439 | HIGH | 8.8 | 1.1% | Mar 20, 2025 | SuperAGI is vulnerable to remote code execution in the latest version. The `agent template update` API allows attackers ... |
| CVE-2024-9437 | HIGH | 7.5 | 0.8% | Mar 20, 2025 | SuperAGI version v0.0.14 is vulnerable to an unauthenticated Denial of Service (DoS) attack. The vulnerability exists in... |
| CVE-2024-9431 | HIGH | 8.8 | 0.6% | Mar 20, 2025 | In version v0.0.14 of transformeroptimus/superagi, there is an improper privilege management vulnerability. After loggin... |
| CVE-2024-9418 | MEDIUM | 6.5 | 0.6% | Mar 20, 2025 | In version 0.0.14 of transformeroptimus/superagi, the API endpoint `/api/users/get/{id}` returns the user's password in ... |
| CVE-2024-9415 | HIGH | 8.8 | 1.3% | Mar 20, 2025 | A Path Traversal vulnerability exists in the file upload functionality of transformeroptimus/superagi version 0.0.14. Th... |
| CVE-2024-9365 | MEDIUM | 6.5 | 0.2% | Mar 20, 2025 | A Cross-Site Request Forgery (CSRF) vulnerability in polyaxon/polyaxon v2.4.0 allows attackers to perform unauthorized a... |
| CVE-2024-9363 | HIGH | 7.5 | 1.0% | Mar 20, 2025 | An unauthorized file deletion vulnerability exists in the latest version of the Polyaxon platform, which can lead to den... |
| CVE-2024-9362 | HIGH | 7.5 | 4.2% | Mar 20, 2025 | An unauthenticated directory traversal vulnerability exists in Polyaxon, affecting the latest version. This vulnerabilit... |
| CVE-2024-9340 | HIGH | 7.5 | 0.9% | Mar 20, 2025 | A Denial of Service (DoS) vulnerability in zenml-io/zenml version 0.66.0 allows unauthenticated attackers to cause exces... |
| CVE-2024-9311 | MEDIUM | 6.1 | 0.2% | Mar 20, 2025 | A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker to upload f... |
| CVE-2024-9309 | CRITICAL | 9.3 | 0.5% | Mar 20, 2025 | A Server-Side Request Forgery (SSRF) vulnerability exists in the POST /worker_generate_stream API endpoint of the Contro... |
| CVE-2024-9308 | MEDIUM | 6.1 | 0.5% | Mar 20, 2025 | An open redirect vulnerability in haotian-liu/llava version v1.2.0 (LLaVA-1.6) allows a remote unauthenticated attacker ... |
| CVE-2024-9229 | HIGH | 7.5 | 0.7% | Mar 20, 2025 | A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated a... |
| CVE-2024-9216 | HIGH | 8.1 | 0.6% | Mar 20, 2025 | An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to ... |
| CVE-2024-9159 | MEDIUM | 6.5 | 0.6% | Mar 20, 2025 | An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability all... |
| CVE-2024-9107 | MEDIUM | 5.4 | 0.5% | Mar 20, 2025 | A stored cross-site scripting (XSS) vulnerability exists in the gaizhenbiao/chuanhuchatgpt repository, affecting version... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now