2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45199 | HIGH | 8.8 | 0.5% | Apr 3, 2025 | insightsoftware Hive JDBC through 2.6.13 has a remote code execution vulnerability. Attackers can inject malicious param... |
| CVE-2024-45198 | HIGH | 8.8 | 0.5% | Apr 3, 2025 | insightsoftware Spark JDBC 2.6.21 has a remote code execution vulnerability. Attackers can inject malicious parameters i... |
| CVE-2024-4877 | HIGH | 8.8 | 0.4% | Apr 3, 2025 | OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe whi... |
| CVE-2024-53868 | HIGH | 7.5 | 0.6% | Apr 3, 2025 | Apache Traffic Server allows request smuggling if chunked messages are malformed. This issue affects Apache Traffi... |
| CVE-2024-37917 | HIGH | 7.5 | 0.4% | Apr 2, 2025 | Pexip Infinity before 35.0 has improper input validation that allows remote attackers to trigger a denial of service (so... |
| CVE-2024-36337 | HIGH | 7.9 | 0.1% | Apr 2, 2025 | Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss ... |
| CVE-2024-36336 | HIGH | 7.9 | 0.1% | Apr 2, 2025 | Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a... |
| CVE-2024-36328 | HIGH | 7.3 | 0.1% | Apr 2, 2025 | Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss ... |
| CVE-2024-56474 | HIGH | 8.8 | 0.2% | Apr 2, 2025 | IBM TXSeries for Multiplatforms 9.1 and 11.1 is vulnerable to cross-site request forgery which could allow an attacker t... |
| CVE-2024-25051 | HIGH | 7.2 | 0.3% | Apr 2, 2025 | IBM Jazz Reporting Service 7.0.2 and 7.0.3 does not invalidate session after logout which could allow an authenticated p... |
| CVE-2024-50597 | HIGH | 7.5 | 0.7% | Apr 2, 2025 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRT... |
| CVE-2024-50596 | HIGH | 7.5 | 0.7% | Apr 2, 2025 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRT... |
| CVE-2024-50595 | HIGH | 7.5 | 0.7% | Apr 2, 2025 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRT... |
| CVE-2024-50594 | HIGH | 7.5 | 0.7% | Apr 2, 2025 | An integer underflow vulnerability exists in the HTTP server PUT request functionality of STMicroelectronics X-CUBE-AZRT... |
| CVE-2024-50385 | HIGH | 7.5 | 0.7% | Apr 2, 2025 | A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZ... |
| CVE-2024-50384 | HIGH | 7.5 | 0.7% | Apr 2, 2025 | A denial of service vulnerability exists in the NetX Component HTTP server functionality of STMicroelectronics X-CUBE-AZ... |
| CVE-2024-36465 | HIGH | 8.8 | 23.0% | Apr 2, 2025 | A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiSer... |
| CVE-2024-13567 | HIGH | 7.5 | 0.6% | Apr 1, 2025 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Ex... |
| CVE-2024-54533 | HIGH | 7 | 0.6% | Mar 31, 2025 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.2, macOS... |
| CVE-2024-12021 | HIGH | 8.5 | 0.3% | Mar 31, 2025 | Coverity versions prior to 2024.9.0 are vulnerable to stored cross-site scripting (XSS) in various administrative interf... |
| CVE-2024-7577 | HIGH | 7.5 | 0.3% | Mar 29, 2025 | IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation ... |
| CVE-2024-57083 | HIGH | 7.5 | 0.5% | Mar 28, 2025 | A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attac... |
| CVE-2024-54362 | HIGH | 8.1 | 0.4% | Mar 28, 2025 | Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This is... |
| CVE-2024-54291 | HIGH | 8.6 | 0.5% | Mar 28, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass plugin... |
| CVE-2024-51624 | HIGH | 7.1 | 0.2% | Mar 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jajapagamentos Já-... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now