2024 CVE Vulnerabilities

39,256 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-31153MEDIUM5.5Improper input validation for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authentica...
CVE-2024-31068MEDIUM5.6Improper Finite State Machines (FSMs) in Hardware Logic for some Intel(R) Processors may allow privileged user to potent...
CVE-2024-30211MEDIUM6Improper access control in some Intel(R) ME driver pack installer engines before version 2422.6.2.0 may allow an authent...
CVE-2024-29223HIGH7.8Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticat...
CVE-2024-29214HIGH8.7Improper input validation in UEFI firmware CseVariableStorageSmm for some Intel(R) Processors may allow a privileged use...
CVE-2024-28127HIGH8.7Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl...
CVE-2024-28047MEDIUM6.8Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enabl...
CVE-2024-26021MEDIUM4.6Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged...
CVE-2024-25571MEDIUM4.6Improper input validation in some Intel(R) SPS firmware before SPS_E5_06.01.04.059.0 may allow a privileged user to pote...
CVE-2024-24852MEDIUM6.7Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow a...
CVE-2024-24582HIGH8.7Improper input validation in XmlCli feature for UEFI firmware for some Intel(R) processors may allow privileged user to ...
CVE-2024-21859MEDIUM6.8Improper buffer restrictions in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentiall...
CVE-2024-21830MEDIUM6.7Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potent...
CVE-2024-12673HIGH8.5An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devic...
CVE-2024-6097MEDIUM5.3In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local t...
CVE-2024-11629MEDIUM6.5In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), using .NET Standard 2.0, th...
CVE-2024-11628HIGH7.2In Progress® Telerik® Kendo UI for Vue versions v2.4.0 through v6.0.1, an attacker can introduce or modify properties wi...
CVE-2024-9870HIGH8.8An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior...
CVE-2024-12629HIGH7.2In Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0, an attacker can introduce or modify properties within t...
CVE-2024-11343HIGH8.8In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can le...
CVE-2024-54160MEDIUM6.4dashboards-reporting (aka Dashboards Reports) before 2.19.0.0, as shipped in OpenSearch before 2.19, allows XSS because ...
CVE-2024-12379MEDIUM6.5A denial of service vulnerability in GitLab CE/EE affecting all versions from 14.1 prior to 17.6.5, 17.7 prior to 17.7.4...
CVE-2024-12251HIGH7.8In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is possible through impro...
CVE-2024-57952MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: Revert "libfs: fix infinite directory reads for off...
CVE-2024-57951HIGH7.8In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on hotplug Co...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now