2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34733 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In DevmemXIntMapPages of devicemem_server.c, there is a possible arbitrary code execution due to an integer overflow. Th... |
| CVE-2024-34732 | HIGH | 8.4 | 0.1% | Jan 28, 2025 | In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could l... |
| CVE-2024-13484 | HIGH | 8.2 | 0.2% | Jan 28, 2025 | A flaw was found in openshift-gitops-operator-container. The openshift.io/cluster-monitoring label is applied to all nam... |
| CVE-2024-8401 | MEDIUM | 5.4 | 0.3% | Jan 28, 2025 | CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when a... |
| CVE-2024-7881 | MEDIUM | 5.1 | 0.2% | Jan 28, 2025 | An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged locati... |
| CVE-2024-6351 | MEDIUM | 4.3 | 0.2% | Jan 28, 2025 | A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert |
| CVE-2024-11956 | HIGH | 7.2 | 0.8% | Jan 28, 2025 | A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affect... |
| CVE-2024-11954 | MEDIUM | 4.8 | 1.0% | Jan 28, 2025 | A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown func... |
| CVE-2024-23953 | MEDIUM | 6.5 | 1.1% | Jan 28, 2025 | Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid s... |
| CVE-2024-13527 | MEDIUM | 5.4 | 0.2% | Jan 28, 2025 | The Philantro – Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2024-13521 | MEDIUM | 5.4 | 0.1% | Jan 28, 2025 | The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and... |
| CVE-2024-13509 | MEDIUM | 6.1 | 0.3% | Jan 28, 2025 | The WS Form LITE and PRO plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the url parameter in al... |
| CVE-2024-13448 | CRITICAL | 9.8 | 0.9% | Jan 28, 2025 | The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in ... |
| CVE-2024-12807 | MEDIUM | 4.8 | 0.3% | Jan 28, 2025 | The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could... |
| CVE-2024-12723 | MEDIUM | 6.1 | 0.3% | Jan 28, 2025 | The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in... |
| CVE-2024-11135 | HIGH | 7.5 | 0.4% | Jan 28, 2025 | The Eventer plugin for WordPress is vulnerable to SQL Injection via the 'event' parameter in the 'eventer_get_attendees'... |
| CVE-2024-53881 | MEDIUM | 5.5 | 0.1% | Jan 28, 2025 | NVIDIA vGPU software contains a vulnerability in the host driver, where it can allow a guest to cause an interrupt storm... |
| CVE-2024-53869 | MEDIUM | 5.5 | 0.2% | Jan 28, 2025 | NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A suc... |
| CVE-2024-0150 | HIGH | 7.1 | 0.2% | Jan 28, 2025 | NVIDIA GPU display driver for Windows and Linux contains a vulnerability where data is written past the end or before th... |
| CVE-2024-0149 | LOW | 3.3 | 0.2% | Jan 28, 2025 | NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files.... |
| CVE-2024-0147 | MEDIUM | 5.5 | 0.2% | Jan 28, 2025 | NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been free... |
| CVE-2024-0146 | HIGH | 7.8 | 0.2% | Jan 28, 2025 | NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause memory cor... |
| CVE-2024-0140 | MEDIUM | 6.8 | 0.2% | Jan 28, 2025 | NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data is... |
| CVE-2024-0137 | MEDIUM | 6.5 | 0.3% | Jan 28, 2025 | NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le... |
| CVE-2024-0136 | HIGH | 8.4 | 0.7% | Jan 28, 2025 | NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now