2024 CVE Vulnerabilities
39,221 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-47013 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This c... |
| CVE-2024-47012 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bound... |
| CVE-2024-44101 | HIGH | 7.5 | 0.4% | Oct 25, 2024 | there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote d... |
| CVE-2024-44100 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545. |
| CVE-2024-44098 | HIGH | 7.4 | 0.1% | Oct 25, 2024 | In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free.... |
| CVE-2024-9598 | HIGH | 8.8 | 0.3% | Oct 25, 2024 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio... |
| CVE-2024-45785 | HIGH | 7.5 | 0.4% | Oct 25, 2024 | MUSASI version 3 contains an issue with use of client-side authentication. If this vulnerability is exploited, other use... |
| CVE-2024-9235 | HIGH | 8.8 | 0.5% | Oct 25, 2024 | The Mapster WP Maps plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege e... |
| CVE-2024-47005 | HIGH | 8.1 | 0.5% | Oct 25, 2024 | Sharp and Toshiba Tec MFPs provide configuration related APIs. They are expected to be called by administrative users on... |
| CVE-2024-45829 | HIGH | 7.5 | 0.7% | Oct 25, 2024 | Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly... |
| CVE-2024-43424 | HIGH | 7.5 | 0.7% | Oct 25, 2024 | Sharp and Toshiba Tec MFPs improperly process HTTP request headers, resulting in an Out-of-bounds Read vulnerability. C... |
| CVE-2024-42420 | HIGH | 7.5 | 0.7% | Oct 25, 2024 | Sharp and Toshiba Tec MFPs contain multiple Out-of-bounds Read vulnerabilities, due to improper processing of keyword se... |
| CVE-2024-10011 | HIGH | 8.1 | 0.9% | Oct 25, 2024 | The BuddyPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 14.1.0 vi... |
| CVE-2024-10353 | HIGH | 7.2 | 0.5% | Oct 25, 2024 | A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown f... |
| CVE-2024-10351 | HIGH | 8.8 | 0.8% | Oct 25, 2024 | A vulnerability was found in Tenda RX9 Pro 22.03.02.20. It has been rated as critical. This issue affects the function s... |
| CVE-2024-49359 | HIGH | 7.5 | 1.0% | Oct 24, 2024 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all ... |
| CVE-2024-49357 | HIGH | 7.5 | 20.6% | Oct 24, 2024 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all ... |
| CVE-2024-7763 | HIGH | 7.5 | 0.6% | Oct 24, 2024 | In WhatsUp Gold versions released before 2024.0.0, an Authentication Bypass issue exists which allows an attacker to o... |
| CVE-2024-48931 | HIGH | 7.5 | 0.7% | Oct 24, 2024 | ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.2.4 and all ... |
| CVE-2024-48423 | HIGH | 7.8 | 0.3% | Oct 24, 2024 | An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function wi... |
| CVE-2024-48208 | HIGH | 8.6 | 1.5% | Oct 24, 2024 | pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bounds read in the domlsd() function of the... |
| CVE-2024-47881 | HIGH | 8.8 | 0.7% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.... |
| CVE-2024-47879 | HIGH | 8.8 | 0.4% | Oct 24, 2024 | OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request f... |
| CVE-2024-45263 | HIGH | 8.8 | 0.3% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The upl... |
| CVE-2024-45262 | HIGH | 8.8 | 0.6% | Oct 24, 2024 | An issue was discovered on certain GL-iNet devices, including MT6000, MT3000, MT2500, AXT1800, and AX1800 4.6.2. The par... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now