2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2269 | CRITICAL | 9.8 | 0.6% | Mar 7, 2024 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by thi... |
| CVE-2024-2268 | CRITICAL | 9.8 | 0.6% | Mar 7, 2024 | A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been classified as critical. Affected is a... |
| CVE-2024-2264 | CRITICAL | 9.8 | 0.6% | Mar 7, 2024 | A vulnerability, which was classified as critical, has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0. Affecte... |
| CVE-2024-2044 | CRITICAL | 9.9 | 79.3% | Mar 7, 2024 | pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling... |
| CVE-2024-1351 | CRITICAL | 9.8 | 0.5% | Mar 7, 2024 | Under certain configurations of --tlsCAFile and tls.CAFile, MongoDB Server may skip peer certificate validation which ma... |
| CVE-2024-0818 | CRITICAL | 9.1 | 1.0% | Mar 7, 2024 | Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6 |
| CVE-2024-0917 | CRITICAL | 9.8 | 1.6% | Mar 7, 2024 | remote code execution in paddlepaddle/paddle 2.6.0 |
| CVE-2024-28222 | CRITICAL | 9.8 | 1.0% | Mar 7, 2024 | In Veritas NetBackup before 8.1.2 and NetBackup Appliance before 3.1.2, the BPCD process inadequately validates the file... |
| CVE-2024-28213 | CRITICAL | 9.8 | 1.2% | Mar 7, 2024 | nGrinder before 3.5.9 allows to accept serialized Java objects from unauthenticated users, which could allow remote atta... |
| CVE-2024-28212 | CRITICAL | 9.8 | 1.0% | Mar 7, 2024 | nGrinder before 3.5.9 uses old version of SnakeYAML, which could allow remote attacker to execute arbitrary code via uns... |
| CVE-2024-28211 | CRITICAL | 9.8 | 0.8% | Mar 7, 2024 | nGrinder before 3.5.9 allows connection to malicious JMX/RMI server by default, which could be the cause of executing ar... |
| CVE-2024-22857 | CRITICAL | 9.8 | 1.7% | Mar 7, 2024 | Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but... |
| CVE-2024-27308 | CRITICAL | 9.1 | 0.9% | Mar 6, 2024 | Mio is a Metal I/O library for Rust. When using named pipes on Windows, mio will under some circumstances return invalid... |
| CVE-2024-27307 | CRITICAL | 9.8 | 1.4% | Mar 6, 2024 | JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a m... |
| CVE-2024-27304 | CRITICAL | 9.8 | 1.1% | Mar 6, 2024 | pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind m... |
| CVE-2024-27302 | CRITICAL | 9.1 | 0.8% | Mar 6, 2024 | go-zero is a web and rpc framework. Go-zero allows user to specify a CORS Filter with a configurable allows param - whic... |
| CVE-2024-24767 | CRITICAL | 9.8 | 1.0% | Mar 6, 2024 | CasaOS-UserService provides user management functionalities to CasaOS. Starting in version 0.4.4.3 and prior to version ... |
| CVE-2024-24765 | CRITICAL | 9.8 | 1.0% | Mar 6, 2024 | CasaOS-UserService provides user management functionalities to CasaOS. Prior to version 0.4.7, path filtering of the URL... |
| CVE-2024-26580 | CRITICAL | 9.1 | 1.2% | Mar 6, 2024 | Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.... |
| CVE-2024-27764 | CRITICAL | 9.8 | 1.0% | Mar 5, 2024 | An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component. |
| CVE-2024-24276 | CRITICAL | 9.6 | 0.9% | Mar 5, 2024 | Cross Site Scripting (XSS) vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote atta... |
| CVE-2024-24275 | CRITICAL | 9.6 | 0.9% | Mar 5, 2024 | Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker t... |
| CVE-2024-25614 | CRITICAL | 9.1 | 0.5% | Mar 5, 2024 | There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerabil... |
| CVE-2024-2056 | CRITICAL | 9.8 | 16.7% | Mar 5, 2024 | Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy servi... |
| CVE-2024-2055 | CRITICAL | 9.8 | 0.9% | Mar 5, 2024 | The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities. When the... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now