2024 CVE Vulnerabilities
39,247 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2892 | HIGH | 8.8 | 1.7% | Mar 26, 2024 | A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. Affected by this vulnerability is th... |
| CVE-2024-2452 | CRITICAL | 9.8 | 0.9% | Mar 26, 2024 | In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of __portable_aligned_alloc() could cau... |
| CVE-2024-2214 | HIGH | 7.8 | 0.3% | Mar 26, 2024 | In Eclipse ThreadX before version 6.4.0, the _Mtxinit() function in the Xtensa port was missing an array size check cau... |
| CVE-2024-2212 | HIGH | 7.8 | 0.5% | Mar 26, 2024 | In Eclipse ThreadX before 6.4.0, xQueueCreate() and xQueueCreateSet() functions from the FreeRTOS compatibility API (... |
| CVE-2024-29833 | MEDIUM | 5.4 | 0.4% | Mar 26, 2024 | The image upload component allows SVG files and the regular expression used to remove script tags can be bypassed by usi... |
| CVE-2024-29832 | MEDIUM | 6.1 | 0.4% | Mar 26, 2024 | The current_url parameter of the AJAX call to the GalleryBox action of admin-ajax.php is vulnerable to reflected Cross S... |
| CVE-2024-29810 | MEDIUM | 5.4 | 0.4% | Mar 26, 2024 | The thumb_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross ... |
| CVE-2024-29809 | MEDIUM | 5.4 | 0.4% | Mar 26, 2024 | The image_url parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross ... |
| CVE-2024-29808 | MEDIUM | 5.4 | 0.4% | Mar 26, 2024 | The image_id parameter of the AJAX call to the editimage_bwg action of admin-ajax.php is vulnerable to reflected Cross S... |
| CVE-2024-26645 | MEDIUM | 5.5 | 0.2% | Mar 26, 2024 | In the Linux kernel, the following vulnerability has been resolved: tracing: Ensure visibility when inserting an elemen... |
| CVE-2024-26644 | MEDIUM | 5.5 | 0.2% | Mar 26, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to sn... |
| CVE-2024-25958 | HIGH | 7.8 | 0.1% | Mar 26, 2024 | Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A ... |
| CVE-2024-25957 | MEDIUM | 5.5 | 0.2% | Mar 26, 2024 | Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in ... |
| CVE-2024-25956 | MEDIUM | 5.5 | 0.2% | Mar 26, 2024 | Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability. A locally authenti... |
| CVE-2024-21920 | HIGH | 7.1 | 0.2% | Mar 26, 2024 | A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyon... |
| CVE-2024-21919 | HIGH | 7.8 | 0.3% | Mar 26, 2024 | An uninitialized pointer in Rockwell Automation Arena Simulation software could potentially allow a malicious user to i... |
| CVE-2024-21918 | HIGH | 7.8 | 0.2% | Mar 26, 2024 | A memory buffer vulnerability in Rockwell Automation Arena Simulation software could potentially allow a malicious user... |
| CVE-2024-21913 | HIGH | 7.8 | 0.2% | Mar 26, 2024 | A heap-based memory buffer overflow vulnerability in Rockwell Automation Arena Simulation software could potentially al... |
| CVE-2024-21912 | HIGH | 7.8 | 0.3% | Mar 26, 2024 | An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert una... |
| CVE-2024-2802 | — | — | — | Mar 26, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-1166. Reason: This candidate is a r... |
| CVE-2024-29401 | CRITICAL | 9.8 | 0.8% | Mar 26, 2024 | xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted a... |
| CVE-2024-29197 | MEDIUM | 6.5 | 0.7% | Mar 26, 2024 | Pimcore is an Open Source Data & Experience Management Platform. Any call with the query argument `?pimcore_preview=true... |
| CVE-2024-23722 | HIGH | 7.5 | 0.9% | Mar 26, 2024 | In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content... |
| CVE-2024-23482 | HIGH | 7.8 | 0.3% | Mar 26, 2024 | The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fi... |
| CVE-2024-22356 | MEDIUM | 4.9 | 0.5% | Mar 26, 2024 | IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1 t... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now