2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-28168 | HIGH | 7.5 | 1.0% | Oct 9, 2024 | Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affe... |
| CVE-2024-47334 | HIGH | 7.6 | 0.4% | Oct 9, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Zoho Flow Zoho Flo... |
| CVE-2024-9575 | HIGH | 8.5 | 0.5% | Oct 9, 2024 | Local File Inclusion vulnerability in pretix Widget WordPress plugin pretix-widget on Windows allows PHP Local File Incl... |
| CVE-2024-47418 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar... |
| CVE-2024-47417 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result... |
| CVE-2024-47416 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could r... |
| CVE-2024-47415 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar... |
| CVE-2024-47414 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar... |
| CVE-2024-47413 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar... |
| CVE-2024-47412 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrar... |
| CVE-2024-47411 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could ... |
| CVE-2024-47410 | HIGH | 7.8 | 0.4% | Oct 9, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could resul... |
| CVE-2024-45150 | HIGH | 7.8 | 0.3% | Oct 9, 2024 | Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary... |
| CVE-2024-45146 | HIGH | 7.8 | 0.3% | Oct 9, 2024 | Dimension versions 4.0.3 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code ... |
| CVE-2024-47191 | HIGH | 7.1 | 0.3% | Oct 9, 2024 | pam_oath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context ... |
| CVE-2024-45179 | HIGH | 7.2 | 2.6% | Oct 9, 2024 | An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to insufficient input validatio... |
| CVE-2024-35288 | HIGH | 7.8 | 0.3% | Oct 9, 2024 | Nitro PDF Pro before 13.70.8.82 and 14.x before 14.26.1.0 allows Local Privilege Escalation in the MSI Installer because... |
| CVE-2024-9603 | HIGH | 8.8 | 0.5% | Oct 8, 2024 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2024-9602 | HIGH | 8.8 | 0.8% | Oct 8, 2024 | Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memo... |
| CVE-2024-9412 | HIGH | 8.4 | 0.4% | Oct 8, 2024 | An improper authorization vulnerability exists in the Rockwell Automation affected products that could allow an unauthor... |
| CVE-2024-47773 | HIGH | 8.2 | 1.6% | Oct 8, 2024 | Discourse is an open source platform for community discussion. An attacker can make several XHR requests until the cache... |
| CVE-2024-46539 | HIGH | 8.2 | 0.2% | Oct 8, 2024 | Insecure permissions in the Bluetooth Low Energy (BLE) component of Fire-Boltt Artillery Smart Watch NJ-R6E-10.3 allow a... |
| CVE-2024-43616 | HIGH | 7.8 | 0.7% | Oct 8, 2024 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2024-43615 | HIGH | 7.1 | 1.1% | Oct 8, 2024 | Microsoft OpenSSH for Windows Remote Code Execution Vulnerability |
| CVE-2024-43611 | HIGH | 8.8 | 1.8% | Oct 8, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now