2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45174 | HIGH | 8.1 | 1.3% | Sep 4, 2024 | An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to improper validation of user-... |
| CVE-2024-45170 | HIGH | 8.1 | 0.6% | Sep 4, 2024 | An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper or missing access control, low p... |
| CVE-2024-20440 | HIGH | 7.5 | 51.5% | Sep 4, 2024 | A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive inf... |
| CVE-2024-8391 | HIGH | 7.5 | 0.6% | Sep 4, 2024 | In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GA... |
| CVE-2024-45075 | HIGH | 8.8 | 0.4% | Sep 4, 2024 | IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to es... |
| CVE-2024-45053 | HIGH | 7.2 | 1.3% | Sep 4, 2024 | Fides is an open-source privacy engineering platform. Starting in version 2.19.0 and prior to version 2.44.0, the Email ... |
| CVE-2024-45050 | HIGH | 7.1 | 0.3% | Sep 4, 2024 | Ringer server is the server code for the Ringer messaging app. Prior to version 1.3.1, there is an issue with the messag... |
| CVE-2024-44859 | HIGH | 8 | 0.6% | Sep 4, 2024 | Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`. |
| CVE-2024-44817 | HIGH | 8.8 | 0.7% | Sep 4, 2024 | SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the ... |
| CVE-2024-43405 | HIGH | 7.8 | 1.1% | Sep 4, 2024 | Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2,... |
| CVE-2024-43402 | HIGH | 8.8 | 0.7% | Sep 4, 2024 | Rust is a programming language. The fix for CVE-2024-24576, where `std::process::Command` incorrectly escaped arguments ... |
| CVE-2024-8418 | HIGH | 7.5 | 0.8% | Sep 4, 2024 | A flaw was found in Aardvark-dns, which is vulnerable to a Denial of Service attack due to the serial processing of TCP ... |
| CVE-2024-8410 | HIGH | 7.5 | 0.7% | Sep 4, 2024 | A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown... |
| CVE-2024-8409 | HIGH | 7.5 | 0.7% | Sep 4, 2024 | A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part ... |
| CVE-2024-45506 | HIGH | 7.5 | 1.2% | Sep 4, 2024 | HAProxy 2.9.x before 2.9.10, 3.0.x before 3.0.4, and 3.1.x through 3.1-dev6 allows a remote denial of service for HTTP/2... |
| CVE-2024-7834 | HIGH | 7.8 | 0.3% | Sep 4, 2024 | A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-... |
| CVE-2024-7870 | HIGH | 7.5 | 0.4% | Sep 4, 2024 | The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable ... |
| CVE-2024-45195 | HIGH | 7.5 | 100.0% | Sep 4, 2024 | Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Us... |
| CVE-2024-8102 | HIGH | 8.8 | 0.5% | Sep 4, 2024 | The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data... |
| CVE-2024-34660 | HIGH | 7.8 | 0.2% | Sep 4, 2024 | Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary c... |
| CVE-2024-34658 | HIGH | 7.1 | 0.2% | Sep 4, 2024 | Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR. |
| CVE-2024-34656 | HIGH | 7.8 | 0.2% | Sep 4, 2024 | Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. |
| CVE-2024-34638 | HIGH | 7.1 | 0.1% | Sep 4, 2024 | Improper handling of exceptional conditions in ThemeCenter prior to SMR Sep-2024 Release 1 allows local attackers to del... |
| CVE-2024-39921 | HIGH | 7.5 | 0.4% | Sep 4, 2024 | Observable timing discrepancy issue exists in IPCOM EX2 Series V01L02NF0001 to V01L06NF0401, V01L20NF0001 to V01L20NF040... |
| CVE-2024-45450 | HIGH | 7.5 | 0.2% | Sep 4, 2024 | Permission control vulnerability in the software update module. Impact: Successful exploitation of this vulnerability ma... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now