2024 CVE Vulnerabilities

39,247 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-27331LOW3.3PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27330LOW3.3PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27329MEDIUM5.5PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27328MEDIUM5.5PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27327HIGH7.8PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows r...
CVE-2024-27326MEDIUM5.5PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27325MEDIUM5.5PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27324MEDIUM5.5PDF-XChange Editor TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows r...
CVE-2024-27323HIGH7.5PDF-XChange Editor Updater Improper Certificate Validation Remote Code Execution Vulnerability. This vulnerability allow...
CVE-2024-23119HIGH8.8Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attacke...
CVE-2024-23118HIGH7.2Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote a...
CVE-2024-23117HIGH7.2Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remot...
CVE-2024-23116HIGH7.2Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
CVE-2024-23115HIGH7.2Centreon updateGroups SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e...
CVE-2024-1863CRITICAL9.8Sante PACS Server Token Endpoint SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote att...
CVE-2024-1179HIGH8.8TP-Link Omada ER605 DHCPv6 Client Options Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerab...
CVE-2024-0637HIGH8.8Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers t...
CVE-2024-29435MEDIUM4.1An issue discovered in Alldata v0.4.6 allows attacker to run arbitrary commands via the processId parameter.
CVE-2024-29433CRITICAL9.8A deserialization vulnerability in the FASTJSON component of Alldata v0.4.6 allows attackers to execute arbitrary comman...
CVE-2024-3135MEDIUM6.5A Cross-Site Request Forgery (CSRF) vulnerability exists in the mudler/localai application, allowing attackers to craft ...
CVE-2024-3131MEDIUM6.5A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical....
CVE-2024-28232HIGH7.5Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page ha...
CVE-2024-3129MEDIUM6.3A vulnerability was found in SourceCodester Image Accordion Gallery App 1.0. It has been classified as critical. This af...
CVE-2024-30867CRITICAL9.8netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.
CVE-2024-30863MEDIUM6.3netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now