2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54461 | HIGH | 7.1 | 0.2% | Jan 29, 2025 | The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious doc... |
| CVE-2024-41140 | MEDIUM | 6.5 | 0.9% | Jan 29, 2025 | Zohocorp ManageEngine Applications Manager versions 174000 and prior are vulnerable to the incorrect authorization in th... |
| CVE-2024-13561 | MEDIUM | 6.4 | 0.3% | Jan 29, 2025 | The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's brid_ov... |
| CVE-2024-57965 | CRITICAL | 9.8 | 0.4% | Jan 29, 2025 | In axios before 1.7.8, lib/helpers/isURLSameOrigin.js does not use a URL object when determining an origin, and has a po... |
| CVE-2024-7695 | HIGH | 8.7 | 0.7% | Jan 29, 2025 | Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient inp... |
| CVE-2024-13696 | HIGH | 7.2 | 0.4% | Jan 29, 2025 | The Flexible Wishlist for WooCommerce – Ecommerce Wishlist & Save for later plugin for WordPress is vulnerable to Stored... |
| CVE-2024-12749 | HIGH | 7.1 | 0.6% | Jan 29, 2025 | The Competition Form WordPress plugin through 2.0 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2024-57519 | HIGH | 7.5 | 0.7% | Jan 28, 2025 | An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in ... |
| CVE-2024-56529 | HIGH | 7.1 | 0.4% | Jan 28, 2025 | Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a sess... |
| CVE-2024-48310 | HIGH | 7.5 | 0.5% | Jan 28, 2025 | AutoLib Software Systems OPAC v20.10 was discovered to have multiple API keys exposed within the source code. Attackers ... |
| CVE-2024-57514 | MEDIUM | 4.8 | 0.9% | Jan 28, 2025 | The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listi... |
| CVE-2024-57376 | HIGH | 8.8 | 3.6% | Jan 28, 2025 | Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C... |
| CVE-2024-55968 | HIGH | 8.8 | 1.0% | Jan 28, 2025 | An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handli... |
| CVE-2024-29869 | MEDIUM | 5.5 | 0.3% | Jan 28, 2025 | Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the fil... |
| CVE-2024-40677 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections... |
| CVE-2024-40676 | HIGH | 7.7 | 0.2% | Jan 28, 2025 | In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an ... |
| CVE-2024-40675 | HIGH | 7.5 | 0.3% | Jan 28, 2025 | In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead ... |
| CVE-2024-40674 | MEDIUM | 5.3 | 0.2% | Jan 28, 2025 | In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a ... |
| CVE-2024-40673 | MEDIUM | 6.5 | 0.3% | Jan 28, 2025 | In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Cod... |
| CVE-2024-40672 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permis... |
| CVE-2024-40670 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privil... |
| CVE-2024-40669 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privil... |
| CVE-2024-40651 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation ... |
| CVE-2024-40649 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation ... |
| CVE-2024-34748 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In _DevmemXReservationPageAddress of devicemem_server.c, there is a possible use-after-free due to improper casting. Thi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now