2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6164 | CRITICAL | 9.8 | 1.1% | Jul 18, 2024 | The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. T... |
| CVE-2024-41184 | CRITICAL | 9.8 | 0.6% | Jul 18, 2024 | In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: ... |
| CVE-2024-20419 | CRITICAL | 10 | 80.8% | Jul 17, 2024 | A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauth... |
| CVE-2024-20401 | CRITICAL | 9.8 | 2.3% | Jul 17, 2024 | A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unau... |
| CVE-2024-6834 | CRITICAL | 9 | 0.3% | Jul 17, 2024 | A vulnerability in APIML Spring Cloud Gateway which leverages user privileges by unexpected signing proxied request by Z... |
| CVE-2024-5471 | CRITICAL | 9.8 | 2.5% | Jul 17, 2024 | Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to agent takeover vulnerability due to the har... |
| CVE-2024-36491 | CRITICAL | 9.8 | 0.7% | Jul 17, 2024 | FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allow an administrative user to ex... |
| CVE-2024-31070 | CRITICAL | 9.1 | 0.8% | Jul 17, 2024 | Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series p... |
| CVE-2024-6220 | CRITICAL | 9.8 | 35.7% | Jul 17, 2024 | The 简数采集器 (Keydatas) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in... |
| CVE-2024-6808 | CRITICAL | 9.8 | 0.7% | Jul 17, 2024 | A vulnerability was found in itsourcecode Simple Task List 1.0. It has been classified as critical. This affects the fun... |
| CVE-2024-6803 | CRITICAL | 9.8 | 0.5% | Jul 17, 2024 | A vulnerability has been found in itsourcecode Document Management System 1.0 and classified as critical. Affected by th... |
| CVE-2024-6802 | CRITICAL | 9.8 | 9.8% | Jul 17, 2024 | A vulnerability, which was classified as critical, was found in SourceCodester Computer Laboratory Management System 1.0... |
| CVE-2024-6801 | CRITICAL | 9.8 | 0.8% | Jul 17, 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Student Management System 1.0... |
| CVE-2024-21181 | CRITICAL | 9.8 | 1.1% | Jul 16, 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t... |
| CVE-2024-21175 | CRITICAL | 9.1 | 0.4% | Jul 16, 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t... |
| CVE-2024-6779 | CRITICAL | 9.6 | 0.5% | Jul 16, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perf... |
| CVE-2024-40535 | CRITICAL | 9.8 | 0.6% | Jul 16, 2024 | Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apn_name_3g p... |
| CVE-2024-40515 | CRITICAL | 9.8 | 0.7% | Jul 16, 2024 | An issue in SHENZHEN TENDA TECHNOLOGY CO.,LTD Tenda AX2pro V16.03.29.48_cn allows a remote attacker to execute arbitrary... |
| CVE-2024-40505 | CRITICAL | 9.3 | 0.4% | Jul 16, 2024 | Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via ... |
| CVE-2024-40456 | CRITICAL | 9.8 | 0.5% | Jul 16, 2024 | ThinkSAAS v3.7.0 was discovered to contain a SQL injection vulnerability via the name parameter at \system\action\update... |
| CVE-2024-40394 | CRITICAL | 9.8 | 0.7% | Jul 16, 2024 | Simple Library Management System Project Using PHP/MySQL v1.0 was discovered to contain an arbitrary file upload vulnera... |
| CVE-2024-40393 | CRITICAL | 9.8 | 0.6% | Jul 16, 2024 | Online Clinic Management System In PHP With Free Source code v1.0 was discovered to contain a SQL injection vulnerabilit... |
| CVE-2024-40392 | CRITICAL | 9.8 | 0.5% | Jul 16, 2024 | SourceCodester Pharmacy/Medical Store Point of Sale System Using PHP/MySQL and Bootstrap Framework with Source Code 1.0 ... |
| CVE-2024-40130 | CRITICAL | 9.8 | 0.6% | Jul 16, 2024 | open5gs v2.6.4 is vulnerable to Buffer Overflow. via /lib/core/abts.c. |
| CVE-2024-40129 | CRITICAL | 9.8 | 0.5% | Jul 16, 2024 | Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now