2024 CVE Vulnerabilities
39,219 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10648 | HIGH | 8.2 | 0.7% | Mar 20, 2025 | A path traversal vulnerability exists in the Gradio Audio component of gradio-app/gradio, as of version git 98cbcae. Thi... |
| CVE-2024-10624 | HIGH | 7.5 | 1.0% | Mar 20, 2025 | A Regular Expression Denial of Service (ReDoS) vulnerability exists in the gradio-app/gradio repository, affecting the g... |
| CVE-2024-10572 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | In h2oai/h2o-3 version 3.46.0.1, the `run_tool` command exposes classes in the `water.tools` package through the `ast` p... |
| CVE-2024-10569 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | A vulnerability in the dataframe component of gradio-app/gradio (version git 98cbcae) allows for a zip bomb attack. The ... |
| CVE-2024-10553 | CRITICAL | 9.8 | 1.4% | Mar 20, 2025 | A vulnerability in the h2oai/h2o-3 REST API versions 3.46.0.4 allows unauthenticated remote attackers to execute arbitra... |
| CVE-2024-10550 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | A vulnerability in the `/3/ParseSetup` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) att... |
| CVE-2024-10549 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. ... |
| CVE-2024-10513 | HIGH | 7.2 | 0.8% | Mar 20, 2025 | A path traversal vulnerability exists in the 'document uploads manager' feature of mintplex-labs/anything-llm, affecting... |
| CVE-2024-10481 | MEDIUM | 6.5 | 0.2% | Mar 20, 2025 | A CSRF vulnerability exists in comfyanonymous/comfyui versions up to v0.2.2. This vulnerability allows attackers to host... |
| CVE-2024-10457 | MEDIUM | 6.5 | 0.5% | Mar 20, 2025 | Multiple Server-Side Request Forgery (SSRF) vulnerabilities were identified in the significant-gravitas/autogpt reposito... |
| CVE-2024-10366 | MEDIUM | 6.5 | 0.3% | Mar 20, 2025 | An improper access control vulnerability (IDOR) exists in the delete attachments functionality of danny-avila/librechat ... |
| CVE-2024-10363 | MEDIUM | 5.4 | 0.3% | Mar 20, 2025 | In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and ... |
| CVE-2024-10361 | CRITICAL | 9.1 | 0.9% | Mar 20, 2025 | An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /ap... |
| CVE-2024-10359 | MEDIUM | 4.6 | 0.3% | Mar 20, 2025 | In danny-avila/librechat version v0.7.5-rc2, a vulnerability exists in the preset creation functionality where a user ca... |
| CVE-2024-10330 | MEDIUM | 6.5 | 0.5% | Mar 20, 2025 | In lunary-ai/lunary version 1.5.6, the `/v1/evaluators/` endpoint lacks proper access control, allowing any user associa... |
| CVE-2024-10275 | HIGH | 7.3 | 0.5% | Mar 20, 2025 | In version 1.5.5 of lunary-ai/lunary, a vulnerability exists where admins, who do not have direct permissions to access ... |
| CVE-2024-10274 | MEDIUM | 6.5 | 0.5% | Mar 20, 2025 | An improper authorization vulnerability exists in lunary-ai/lunary version 1.5.5. The /users/me/org endpoint lacks adequ... |
| CVE-2024-10273 | MEDIUM | 6.5 | 0.4% | Mar 20, 2025 | In lunary-ai/lunary v1.5.0, improper privilege management in the models.ts file allows users with viewer roles to modify... |
| CVE-2024-10272 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any d... |
| CVE-2024-10267 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. An attacker can lea... |
| CVE-2024-10264 | CRITICAL | 9.8 | 0.9% | Mar 20, 2025 | HTTP Request Smuggling vulnerability in netease-youdao/qanything version 1.4.1 allows attackers to exploit inconsistenci... |
| CVE-2024-10252 | HIGH | 7.2 | 0.7% | Mar 20, 2025 | A vulnerability in langgenius/dify versions <=v0.9.1 allows for code injection via internal SSRF requests in the Dify sa... |
| CVE-2024-10225 | HIGH | 7.5 | 0.6% | Mar 20, 2025 | A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS) by appending a large n... |
| CVE-2024-10190 | CRITICAL | 9.8 | 1.0% | Mar 20, 2025 | Horovod versions up to and including v0.28.1 are vulnerable to unauthenticated remote code execution. The vulnerability ... |
| CVE-2024-10188 | HIGH | 7.5 | 0.5% | Mar 20, 2025 | A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now