2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54853 | MEDIUM | 5.4 | 0.2% | Feb 5, 2025 | A Stored Cross-Site Scripting (XSS) vulnerability was identified affecting Skybox Change Manager versions 13.2.170 and e... |
| CVE-2024-48394 | HIGH | 7.8 | 0.1% | Feb 5, 2025 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the driver of the NDD Print solution, which... |
| CVE-2024-7596 | MEDIUM | 6.5 | 0.8% | Feb 5, 2025 | Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing ... |
| CVE-2024-7595 | MEDIUM | 6.5 | 1.5% | Feb 5, 2025 | GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof ... |
| CVE-2024-56135 | MEDIUM | 6.8 | 0.6% | Feb 5, 2025 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi... |
| CVE-2024-56134 | MEDIUM | 6.8 | 0.6% | Feb 5, 2025 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi... |
| CVE-2024-56133 | MEDIUM | 6.8 | 0.6% | Feb 5, 2025 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi... |
| CVE-2024-56132 | MEDIUM | 6.8 | 6.1% | Feb 5, 2025 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi... |
| CVE-2024-56131 | MEDIUM | 6.8 | 0.6% | Feb 5, 2025 | Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. Thi... |
| CVE-2024-42207 | MEDIUM | 6 | 0.3% | Feb 5, 2025 | HCL iAutomate is affected by a session fixation vulnerability. An attacker could hijack a victim's session ID from thei... |
| CVE-2024-39564 | HIGH | 8.7 | 0.4% | Feb 5, 2025 | This is a similar, but different vulnerability than the issue reported as CVE-2024-39549. A double-free vulnerability i... |
| CVE-2024-9097 | MEDIUM | 4.3 | 0.6% | Feb 5, 2025 | ManageEngine Endpoint Central versions before 11.3.2440.09 are vulnerable to IDOR vulnerability which allows the attacke... |
| CVE-2024-2878 | HIGH | 7.5 | 17.6% | Feb 5, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.7 prior to 16.9.7, starting from 16... |
| CVE-2024-52365 | MEDIUM | 5.4 | 0.2% | Feb 5, 2025 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21... |
| CVE-2024-52364 | MEDIUM | 5.4 | 0.2% | Feb 5, 2025 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21... |
| CVE-2024-49348 | MEDIUM | 6.5 | 0.2% | Feb 5, 2025 | IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21... |
| CVE-2024-3976 | MEDIUM | 6.5 | 0.5% | Feb 5, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16... |
| CVE-2024-9631 | HIGH | 7.5 | 0.7% | Feb 5, 2025 | An issue was discovered in GitLab CE/EE affecting all versions starting from 13.6 prior to 17.2.9, starting from 17.3 pr... |
| CVE-2024-5528 | MEDIUM | 5.4 | 0.4% | Feb 5, 2025 | An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and... |
| CVE-2024-49352 | HIGH | 7.1 | 0.4% | Feb 5, 2025 | IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, 12.0.2, 12.0.3, and 12.0.4 is vulnerable to... |
| CVE-2024-6356 | MEDIUM | 4.4 | 0.2% | Feb 5, 2025 | An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior... |
| CVE-2024-1539 | MEDIUM | 5.3 | 0.3% | Feb 5, 2025 | An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10... |
| CVE-2024-13829 | MEDIUM | 5.3 | 0.4% | Feb 5, 2025 | The WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto plugin for WordPress is vulnerable t... |
| CVE-2024-53966 | MEDIUM | 5.4 | 0.4% | Feb 5, 2025 | Adobe Experience Manager versions 6.5.21 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2024-53965 | MEDIUM | 5.4 | 0.4% | Feb 5, 2025 | Adobe Experience Manager versions 6.5.21 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerabilit... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now