2024 CVE Vulnerabilities
39,221 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37847 | HIGH | 8.8 | 0.9% | Oct 25, 2024 | An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute ar... |
| CVE-2024-37845 | HIGH | 7.2 | 0.7% | Oct 25, 2024 | MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active... |
| CVE-2024-48700 | HIGH | 7.2 | 0.6% | Oct 25, 2024 | Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or ge... |
| CVE-2024-48655 | HIGH | 8.8 | 1.0% | Oct 25, 2024 | An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file. |
| CVE-2024-48459 | HIGH | 7.3 | 8.2% | Oct 25, 2024 | A command execution vulnerability exists in the AX2 Pro home router produced by Shenzhen Tenda Technology Co., Ltd. (Jix... |
| CVE-2024-10387 | HIGH | 7.5 | 8.0% | Oct 25, 2024 | CVE-2024-10387 IMPACT A Denial-of-Service vulnerability exists in the affected product. The vulnerability could allow... |
| CVE-2024-49381 | HIGH | 7.5 | 0.8% | Oct 25, 2024 | Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLoca... |
| CVE-2024-49380 | HIGH | 7.5 | 2.8% | Oct 25, 2024 | Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` ... |
| CVE-2024-9991 | HIGH | 7 | 0.1% | Oct 25, 2024 | This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the devic... |
| CVE-2024-49376 | HIGH | 8.8 | 0.5% | Oct 25, 2024 | Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password ... |
| CVE-2024-10380 | HIGH | 7.5 | 0.4% | Oct 25, 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.... |
| CVE-2024-10379 | HIGH | 7.5 | 0.7% | Oct 25, 2024 | A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function ac... |
| CVE-2024-47041 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead ... |
| CVE-2024-47035 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic e... |
| CVE-2024-47033 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could le... |
| CVE-2024-47031 | HIGH | 7.4 | 0.1% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861. |
| CVE-2024-47027 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to imprope... |
| CVE-2024-47024 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an intege... |
| CVE-2024-47023 | HIGH | 8.1 | 0.2% | Oct 25, 2024 | there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of p... |
| CVE-2024-47022 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656. |
| CVE-2024-47021 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2024-47020 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488. |
| CVE-2024-47017 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead t... |
| CVE-2024-47016 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privil... |
| CVE-2024-47014 | HIGH | 8.8 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now