2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43096 | HIGH | 8.8 | 0.2% | Jan 21, 2025 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could... |
| CVE-2024-43095 | HIGH | 7.8 | 0.1% | Jan 21, 2025 | In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This co... |
| CVE-2024-34730 | HIGH | 7.8 | 0.1% | Jan 21, 2025 | In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in... |
| CVE-2024-24443 | MEDIUM | 6.5 | 0.3% | Jan 21, 2025 | An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface ... |
| CVE-2024-24428 | HIGH | 7.5 | 0.5% | Jan 21, 2025 | A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Serv... |
| CVE-2024-24427 | HIGH | 7.5 | 0.4% | Jan 21, 2025 | A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service ... |
| CVE-2024-24424 | HIGH | 7.5 | 0.4% | Jan 21, 2025 | A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321... |
| CVE-2024-24423 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co... |
| CVE-2024-24422 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co... |
| CVE-2024-24421 | CRITICAL | 9.8 | 0.9% | Jan 21, 2025 | A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa... |
| CVE-2024-24420 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f... |
| CVE-2024-24419 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co... |
| CVE-2024-24418 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co... |
| CVE-2024-24417 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co... |
| CVE-2024-24416 | HIGH | 7.5 | 0.6% | Jan 21, 2025 | The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co... |
| CVE-2024-51941 | HIGH | 8.8 | 1.4% | Jan 21, 2025 | A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users... |
| CVE-2024-45479 | CRITICAL | 9.1 | 0.6% | Jan 21, 2025 | SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upg... |
| CVE-2024-45478 | MEDIUM | 4.8 | 0.5% | Jan 21, 2025 | Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended ... |
| CVE-2024-24451 | HIGH | 7.5 | 1.0% | Jan 21, 2025 | A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2... |
| CVE-2024-24445 | MEDIUM | 6.5 | 0.3% | Jan 21, 2025 | OpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of unsupported NGAP protoc... |
| CVE-2024-24444 | HIGH | 7.5 | 0.4% | Jan 21, 2025 | Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows... |
| CVE-2024-24442 | HIGH | 7.5 | 0.4% | Jan 21, 2025 | A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.... |
| CVE-2024-57545 | MEDIUM | 5.5 | 0.4% | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_nu... |
| CVE-2024-57544 | MEDIUM | 5.5 | 0.4% | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is... |
| CVE-2024-57543 | MEDIUM | 5.5 | 0.4% | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now