2024 CVE Vulnerabilities
39,222 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-46366 | HIGH | 8.8 | 0.5% | Sep 27, 2024 | A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbi... |
| CVE-2024-6983 | HIGH | 8.8 | 1.3% | Sep 27, 2024 | mudler/localai version 2.17.1 is vulnerable to remote code execution. The vulnerability arises because the localai backe... |
| CVE-2024-46472 | HIGH | 8.6 | 0.4% | Sep 27, 2024 | CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection via the parameter 'email' in the Login Page. |
| CVE-2024-46471 | HIGH | 7.5 | 0.5% | Sep 27, 2024 | The Directory Listing in /uploads/ Folder in CodeAstro Membership Management System 1.0 exposes the structure and conten... |
| CVE-2024-46331 | HIGH | 7.2 | 0.6% | Sep 27, 2024 | ModStartCMS v8.8.0 was discovered to contain an open redirect vulnerability in the redirect parameter at /admin/login. T... |
| CVE-2024-44912 | HIGH | 7.5 | 0.5% | Sep 27, 2024 | NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c). |
| CVE-2024-44911 | HIGH | 7.5 | 0.5% | Sep 27, 2024 | NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c). |
| CVE-2024-44910 | HIGH | 7.5 | 0.5% | Sep 27, 2024 | NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c). |
| CVE-2024-40510 | HIGH | 8.2 | 0.7% | Sep 27, 2024 | Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t... |
| CVE-2024-40509 | HIGH | 7.3 | 0.8% | Sep 27, 2024 | Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t... |
| CVE-2024-7149 | HIGH | 8.8 | 1.0% | Sep 27, 2024 | The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File In... |
| CVE-2024-47182 | HIGH | 7.5 | 0.2% | Sep 27, 2024 | Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwo... |
| CVE-2024-45773 | HIGH | 7.5 | 0.5% | Sep 27, 2024 | A use-after-free vulnerability involving upgradeToRocket requests can cause the application to crash or potentially resu... |
| CVE-2024-40512 | HIGH | 7.3 | 0.7% | Sep 27, 2024 | Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t... |
| CVE-2024-40511 | HIGH | 7.3 | 0.7% | Sep 27, 2024 | Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via t... |
| CVE-2024-46865 | HIGH | 7.1 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: fou: fix initialization of grc The grc must be ini... |
| CVE-2024-46859 | HIGH | 7.8 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out ... |
| CVE-2024-46858 | HIGH | 7 | 0.3% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: Fix uaf in __timer_delete_sync There ar... |
| CVE-2024-46854 | HIGH | 7.1 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: dpaa: Pad packets to ETH_ZLEN When sending pa... |
| CVE-2024-46853 | HIGH | 7.8 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds b... |
| CVE-2024-46852 | HIGH | 7.8 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix off-by-one in CMA heap fault ha... |
| CVE-2024-46849 | HIGH | 7.8 | 0.3% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: ASoC: meson: axg-card: fix 'use-after-free' Buffer... |
| CVE-2024-46845 | HIGH | 7.8 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: tracing/timerlat: Only clear timer if a kthread exi... |
| CVE-2024-46844 | HIGH | 7.8 | 0.3% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: um: line: always fill *error_out in setup_one_line(... |
| CVE-2024-46836 | HIGH | 7.8 | 0.2% | Sep 27, 2024 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed_udc: validate endpoint index fo... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now