2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-36081 | CRITICAL | 9.8 | 0.6% | May 19, 2024 | Westermo EDW-100 devices through 2024-05-03 allow an unauthenticated user to download a configuration file containing a ... |
| CVE-2024-36080 | CRITICAL | 9.8 | 0.6% | May 19, 2024 | Westermo EDW-100 devices through 2024-05-03 have a hidden root user account with a hardcoded password that cannot be cha... |
| CVE-2024-36053 | CRITICAL | 9 | 1.0% | May 19, 2024 | In the mintupload package through 4.2.0 for Linux Mint, service-name mishandling leads to command injection via shell me... |
| CVE-2024-35870 | CRITICAL | 9.8 | 0.2% | May 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in smb2_reconnect_server() Th... |
| CVE-2024-35869 | CRITICAL | 9.8 | 0.3% | May 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: smb: client: guarantee refcounted children from par... |
| CVE-2024-35865 | CRITICAL | 9.8 | 0.2% | May 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF in smb2_is_valid_opl... |
| CVE-2024-28064 | CRITICAL | 9.8 | 0.9% | May 18, 2024 | Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for... |
| CVE-2024-36048 | CRITICAL | 9.8 | 1.0% | May 18, 2024 | QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, an... |
| CVE-2024-5094 | CRITICAL | 9.8 | 0.7% | May 18, 2024 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This iss... |
| CVE-2024-5093 | CRITICAL | 9.8 | 0.7% | May 18, 2024 | A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. Thi... |
| CVE-2024-2771 | CRITICAL | 9.8 | 2.3% | May 18, 2024 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner... |
| CVE-2024-4264 | CRITICAL | 9.8 | 0.9% | May 18, 2024 | A remote code execution (RCE) vulnerability exists in the berriai/litellm project due to improper control of the generat... |
| CVE-2024-5069 | CRITICAL | 9.8 | 0.6% | May 17, 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Online Mens Salon Management ... |
| CVE-2024-5065 | CRITICAL | 9.8 | 0.7% | May 17, 2024 | A vulnerability classified as critical has been found in PHPGurukul Online Course Registration System 3.1. Affected is a... |
| CVE-2024-5064 | CRITICAL | 9.8 | 0.7% | May 17, 2024 | A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been rated as critical. This issue... |
| CVE-2024-5063 | CRITICAL | 9.8 | 0.7% | May 17, 2024 | A vulnerability was found in PHPGurukul Online Course Registration System 3.1. It has been declared as critical. This vu... |
| CVE-2024-35845 | CRITICAL | 9.1 | 1.2% | May 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: dbg-tlv: ensure NUL termination The... |
| CVE-2024-5048 | CRITICAL | 9.8 | 0.6% | May 17, 2024 | A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability ... |
| CVE-2024-5047 | CRITICAL | 9.8 | 0.9% | May 17, 2024 | A vulnerability classified as critical has been found in SourceCodester Student Management System 1.0. Affected is an un... |
| CVE-2024-34982 | CRITICAL | 9.8 | 4.7% | May 17, 2024 | An arbitrary file upload vulnerability in the component /include/file.php of lylme_spage v1.9.5 allows attackers to exec... |
| CVE-2024-34919 | CRITICAL | 9.8 | 0.9% | May 17, 2024 | An arbitrary file upload vulnerability in the component \modstudent\controller.php of Pisay Online E-Learning System usi... |
| CVE-2024-5046 | CRITICAL | 9.8 | 0.7% | May 17, 2024 | A vulnerability was found in SourceCodester Online Examination System 1.0. It has been rated as critical. This issue aff... |
| CVE-2024-32809 | CRITICAL | 10 | 0.5% | May 17, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in JumpDEMAND Inc. ActiveDEMAND allows Using Malicious Fil... |
| CVE-2024-32786 | CRITICAL | 9.8 | 0.5% | May 17, 2024 | Authentication Bypass by Spoofing vulnerability in WP Royal Royal Elementor Addons allows Functionality Bypass.This issu... |
| CVE-2024-33644 | CRITICAL | 9.9 | 1.1% | May 17, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in WPCustomify Customify Site Library allows Cod... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now