2024 CVE Vulnerabilities
39,240 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-41305 | MEDIUM | 4.7 | 0.2% | Jul 30, 2024 | A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application t... |
| CVE-2024-41304 | MEDIUM | 5.4 | 0.4% | Jul 30, 2024 | An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execut... |
| CVE-2024-7297 | HIGH | 8.8 | 21.3% | Jul 30, 2024 | Langflow versions prior to 1.0.13 suffer from a Privilege Escalation vulnerability, allowing a remote and low privileged... |
| CVE-2024-7209 | MEDIUM | 6.5 | 0.3% | Jul 30, 2024 | A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use net... |
| CVE-2024-7208 | MEDIUM | 6.5 | 0.4% | Jul 30, 2024 | A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain,... |
| CVE-2024-5486 | MEDIUM | 4.9 | 0.3% | Jul 30, 2024 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access ... |
| CVE-2024-41944 | MEDIUM | 6.5 | 0.4% | Jul 30, 2024 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplay... |
| CVE-2024-41916 | MEDIUM | 4.9 | 0.4% | Jul 30, 2024 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access ... |
| CVE-2024-41915 | HIGH | 8.8 | 0.5% | Jul 30, 2024 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote at... |
| CVE-2024-41804 | MEDIUM | 6.5 | 0.4% | Jul 30, 2024 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API route inside the CMS... |
| CVE-2024-41803 | MEDIUM | 4.9 | 0.4% | Jul 30, 2024 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CM... |
| CVE-2024-41802 | HIGH | 8.1 | 0.5% | Jul 30, 2024 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the API routes inside the CM... |
| CVE-2024-4188 | HIGH | 7.1 | 0.2% | Jul 30, 2024 | Unprotected Transport of Credentials vulnerability in OpenText™ Documentum™ Server could allow Credential Stuffing.This ... |
| CVE-2024-41109 | MEDIUM | 6.5 | 0.5% | Jul 30, 2024 | Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` wi... |
| CVE-2024-39320 | MEDIUM | 6.1 | 0.4% | Jul 30, 2024 | Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, the vulnerability allows an attacker to... |
| CVE-2024-37299 | HIGH | 7.5 | 0.6% | Jul 30, 2024 | Discourse is an open source discussion platform. Prior to 3.2.5 and 3.3.0.beta5, crafting requests to submit very long t... |
| CVE-2024-37165 | MEDIUM | 6.1 | 0.4% | Jul 30, 2024 | Discourse is an open source discussion platform. Prior to 3.2.3 and 3.3.0.beta3, improperly sanitized Onebox data could ... |
| CVE-2024-38909 | CRITICAL | 9.8 | 0.5% | Jul 30, 2024 | Studio 42 elFinder 2.1.64 is vulnerable to Incorrect Access Control. Copying files with an unauthorized extension betwee... |
| CVE-2024-23091 | HIGH | 7.5 | 0.4% | Jul 30, 2024 | Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwor... |
| CVE-2024-6699 | CRITICAL | 9.8 | 0.4% | Jul 30, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic... |
| CVE-2024-7127 | MEDIUM | 6.1 | 0.4% | Jul 30, 2024 | Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cro... |
| CVE-2024-41702 | CRITICAL | 9.8 | 0.5% | Jul 30, 2024 | SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
| CVE-2024-41701 | MEDIUM | 5.3 | 0.3% | Jul 30, 2024 | AccuPOS - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2024-7226 | HIGH | 8.8 | 0.4% | Jul 30, 2024 | A vulnerability was found in SourceCodester Medicine Tracker System 1.0. It has been declared as problematic. This vulne... |
| CVE-2024-7225 | MEDIUM | 5.4 | 0.5% | Jul 30, 2024 | A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now