2024 CVE Vulnerabilities
39,240 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-39906 | HIGH | 8.3 | 1.0% | Jul 19, 2024 | A command injection vulnerability was found in the IndieAuth functionality of the Ruby on Rails based Haven blog web app... |
| CVE-2024-39123 | MEDIUM | 5.4 | 21.5% | Jul 19, 2024 | In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due... |
| CVE-2024-40400 | HIGH | 8.8 | 0.8% | Jul 19, 2024 | An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitr... |
| CVE-2024-41600 | HIGH | 7.5 | 0.4% | Jul 19, 2024 | Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive... |
| CVE-2024-41603 | CRITICAL | 9.6 | 0.2% | Jul 19, 2024 | Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout. |
| CVE-2024-41602 | HIGH | 8.8 | 0.2% | Jul 19, 2024 | Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privilege... |
| CVE-2024-41601 | HIGH | 7.5 | 0.5% | Jul 19, 2024 | Insecure Permissions vulnerability in lin-CMS v.0.2.0 and before allows a remote attacker to obtain sensitive informatio... |
| CVE-2024-41492 | HIGH | 7.5 | 0.6% | Jul 19, 2024 | A stack overflow in Tenda AX1806 v1.0.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2024-41281 | HIGH | 8.8 | 0.3% | Jul 19, 2024 | Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function. |
| CVE-2024-29080 | MEDIUM | 6.5 | 0.1% | Jul 19, 2024 | Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application En... |
| CVE-2024-24970 | MEDIUM | 6.5 | 0.1% | Jul 19, 2024 | Potential vulnerabilities have been identified in the HP Display Control software component within the HP Application En... |
| CVE-2024-6908 | MEDIUM | 6 | 0.3% | Jul 19, 2024 | Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin... |
| CVE-2024-6895 | MEDIUM | 6.1 | 0.2% | Jul 19, 2024 | Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compro... |
| CVE-2024-39963 | HIGH | 8 | 1.5% | Jul 19, 2024 | AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX9 V22.03.01.46 and AX3000 Dual-Band Gigabit Wi-Fi 6 Router AX12 V1.0 V22.03.01... |
| CVE-2024-39962 | CRITICAL | 9.8 | 2.1% | Jul 19, 2024 | D-Link DIR-823X AX3000 Dual-Band Gigabit Wireless Router v21_D240126 was discovered to contain a remote code execution (... |
| CVE-2024-27489 | HIGH | 7.5 | 0.4% | Jul 19, 2024 | An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request. |
| CVE-2024-0006 | MEDIUM | 5.4 | 0.3% | Jul 19, 2024 | Information exposure in the logging system in Yugabyte Platform allows local attackers with access to application logs t... |
| CVE-2024-37066 | HIGH | 8.8 | 1.8% | Jul 19, 2024 | A command injection vulnerability exists in Wyze V4 Pro firmware versions before 4.50.4.9222, which allows attackers to ... |
| CVE-2024-6916 | MEDIUM | 5.5 | 0.1% | Jul 19, 2024 | A vulnerability in Zowe CLI allows local, privileged actors to display securely stored properties in cleartext within a ... |
| CVE-2024-5977 | MEDIUM | 5.4 | 0.4% | Jul 19, 2024 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Insecure Direct Object Refer... |
| CVE-2024-41107 | HIGH | 8.1 | 17.8% | Jul 19, 2024 | The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments wh... |
| CVE-2024-6907 | MEDIUM | 5.4 | 0.4% | Jul 19, 2024 | A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. Affecte... |
| CVE-2024-6906 | HIGH | 8.8 | 0.5% | Jul 19, 2024 | A vulnerability was found in SourceCodester Record Management System 1.0 and classified as critical. This issue affects ... |
| CVE-2024-6905 | HIGH | 8.8 | 0.6% | Jul 19, 2024 | A vulnerability has been found in SourceCodester Record Management System 1.0 and classified as critical. This vulnerabi... |
| CVE-2024-6904 | HIGH | 8.8 | 0.5% | Jul 19, 2024 | A vulnerability, which was classified as critical, was found in SourceCodester Record Management System 1.0. This affect... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now