2024 CVE Vulnerabilities
39,219 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33039 | MEDIUM | 6.7 | 0.1% | Dec 2, 2024 | Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not valid... |
| CVE-2024-33037 | MEDIUM | 6.1 | 0.1% | Dec 2, 2024 | Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC... |
| CVE-2024-33036 | MEDIUM | 6.7 | 0.1% | Dec 2, 2024 | Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in ... |
| CVE-2024-20139 | MEDIUM | 6.5 | 0.1% | Dec 2, 2024 | In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This cou... |
| CVE-2024-20136 | MEDIUM | 6.2 | 0.1% | Dec 2, 2024 | In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo... |
| CVE-2024-20135 | MEDIUM | 6.7 | 0.1% | Dec 2, 2024 | In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalat... |
| CVE-2024-20134 | MEDIUM | 6.7 | 0.1% | Dec 2, 2024 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr... |
| CVE-2024-20133 | MEDIUM | 6.7 | 0.2% | Dec 2, 2024 | In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalat... |
| CVE-2024-20132 | MEDIUM | 6.7 | 0.2% | Dec 2, 2024 | In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of p... |
| CVE-2024-20131 | MEDIUM | 6.7 | 0.2% | Dec 2, 2024 | In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalat... |
| CVE-2024-20130 | MEDIUM | 6.7 | 0.1% | Dec 2, 2024 | In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of ... |
| CVE-2024-20125 | MEDIUM | 6.7 | 0.1% | Dec 2, 2024 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p... |
| CVE-2024-20116 | MEDIUM | 4.4 | 0.1% | Dec 2, 2024 | In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc... |
| CVE-2024-53752 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berg Informatik St... |
| CVE-2024-53749 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Post C... |
| CVE-2024-53748 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Terry L. WP Mermai... |
| CVE-2024-53747 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nutttaro Video Pla... |
| CVE-2024-53746 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FlickDevs Elemento... |
| CVE-2024-53745 | MEDIUM | 6.5 | 0.3% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 코스모스팜 – Cosmosfarm... |
| CVE-2024-53744 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SkyBootstrap Eleme... |
| CVE-2024-53743 | MEDIUM | 6.5 | 0.2% | Dec 1, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aezaz Shaikh Count... |
| CVE-2024-53786 | MEDIUM | 5.4 | 0.3% | Nov 30, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codeless Cowidgets... |
| CVE-2024-53774 | MEDIUM | 6.5 | 0.3% | Nov 30, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jakub Glos Sparkle... |
| CVE-2024-53773 | MEDIUM | 6.5 | 0.3% | Nov 30, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pracapl Znajdź Pra... |
| CVE-2024-53772 | MEDIUM | 6.5 | 0.3% | Nov 30, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Mail P... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now