2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-13040 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling ... |
| CVE-2024-12839 | HIGH | 8.8 | 0.7% | Dec 31, 2024 | The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypas... |
| CVE-2024-12838 | HIGH | 8.8 | 0.7% | Dec 31, 2024 | The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerabili... |
| CVE-2024-13058 | MEDIUM | 4.8 | 0.4% | Dec 30, 2024 | An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could pote... |
| CVE-2024-13051 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2024-13050 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2024-13049 | HIGH | 7.8 | 0.2% | Dec 30, 2024 | Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2024-13048 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13047 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2024-13046 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13045 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2024-13044 | HIGH | 7.8 | 0.2% | Dec 30, 2024 | Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13043 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers t... |
| CVE-2024-13042 | MEDIUM | 5.3 | 0.4% | Dec 30, 2024 | A vulnerability was found in Tsinghua Unigroup Electronic Archives Management System 3.2.210802(62532). It has been clas... |
| CVE-2024-12753 | HIGH | 7.3 | 0.3% | Dec 30, 2024 | Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to e... |
| CVE-2024-12752 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attack... |
| CVE-2024-12751 | HIGH | 7.8 | 0.4% | Dec 30, 2024 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attac... |
| CVE-2024-11946 | MEDIUM | 6.5 | 0.3% | Dec 30, 2024 | iXsystems TrueNAS CORE fetch_plugin_packagesites tar Cleartext Transmission of Sensitive Information Vulnerability. This... |
| CVE-2024-11944 | HIGH | 8.8 | 1.6% | Dec 30, 2024 | iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2024-56801 | CRITICAL | 9.8 | 0.7% | Dec 30, 2024 | Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version ... |
| CVE-2024-56800 | HIGH | 7.4 | 0.3% | Dec 30, 2024 | Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions pr... |
| CVE-2024-56799 | CRITICAL | 10 | 0.5% | Dec 30, 2024 | Simofa is a tool to help automate static website building and deployment. Prior to version 0.2.7, due to a design mistak... |
| CVE-2024-46542 | MEDIUM | 6.5 | 0.6% | Dec 30, 2024 | Veritas / Arctera Data Insight before 7.1.1 allows Application Administrators to conduct SQL injection attacks. |
| CVE-2024-56734 | MEDIUM | 6.1 | 0.4% | Dec 30, 2024 | Better Auth is an authentication library for TypeScript. An open redirect vulnerability has been identified in the verif... |
| CVE-2024-56733 | MEDIUM | 5.7 | 0.2% | Dec 30, 2024 | Password Pusher is an open source application to communicate sensitive information over the web. A vulnerability has bee... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now