2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-21949 | MEDIUM | 5.5 | 0.2% | Nov 12, 2024 | Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, po... |
| CVE-2024-9999 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Tr... |
| CVE-2024-9843 | MEDIUM | 5.5 | 0.3% | Nov 12, 2024 | A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denia... |
| CVE-2024-51750 | MEDIUM | 5 | 0.5% | Nov 12, 2024 | Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over f... |
| CVE-2024-50336 | MEDIUM | 5.3 | 0.8% | Nov 12, 2024 | matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerabl... |
| CVE-2024-49527 | MEDIUM | 5.5 | 0.3% | Nov 12, 2024 | Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to discl... |
| CVE-2024-30133 | MEDIUM | 5.3 | 0.3% | Nov 12, 2024 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not suff... |
| CVE-2024-11004 | MEDIUM | 6.1 | 0.9% | Nov 12, 2024 | Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a... |
| CVE-2024-52296 | MEDIUM | 6.5 | 0.3% | Nov 12, 2024 | libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with supp... |
| CVE-2024-47909 | MEDIUM | 4.9 | 1.1% | Nov 12, 2024 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 2... |
| CVE-2024-47905 | MEDIUM | 4.9 | 1.1% | Nov 12, 2024 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 2... |
| CVE-2024-47535 | MEDIUM | 5.5 | 0.4% | Nov 12, 2024 | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performan... |
| CVE-2024-10971 | MEDIUM | 4.3 | 0.5% | Nov 12, 2024 | Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious auth... |
| CVE-2024-51566 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | The NVMe driver queue processing is vulernable to guest-induced infinite loops. |
| CVE-2024-51565 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | The hda driver is vulnerable to a buffer over-read from a guest-controlled value. |
| CVE-2024-51563 | MEDIUM | 6.5 | 0.3% | Nov 12, 2024 | The virtio_vq_recordon function is subject to a time-of-check to time-of-use (TOCTOU) race condition. |
| CVE-2024-51562 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value. |
| CVE-2024-39281 | MEDIUM | 5.3 | 0.4% | Nov 12, 2024 | The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel... |
| CVE-2024-33660 | MEDIUM | 5.2 | 0.1% | Nov 12, 2024 | An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. |
| CVE-2024-11130 | MEDIUM | 4.8 | 0.3% | Nov 12, 2024 | A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown ... |
| CVE-2024-11125 | MEDIUM | 4.3 | 0.4% | Nov 12, 2024 | A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processi... |
| CVE-2024-50561 | MEDIUM | 6.1 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
| CVE-2024-50560 | MEDIUM | 4.3 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
| CVE-2024-50559 | MEDIUM | 4.3 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
| CVE-2024-50558 | MEDIUM | 5.3 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now