2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-45442 | HIGH | 7.5 | 0.2% | Sep 4, 2024 | Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of ... |
| CVE-2024-45441 | HIGH | 7.5 | 0.2% | Sep 4, 2024 | Input verification vulnerability in the system service module Impact: Successful exploitation of this vulnerability will... |
| CVE-2024-42039 | HIGH | 7.5 | 0.2% | Sep 4, 2024 | Access control vulnerability in the SystemUI module Impact: Successful exploitation of this vulnerability may affect ser... |
| CVE-2024-41716 | HIGH | 8.1 | 0.4% | Sep 4, 2024 | Cleartext storage of sensitive information vulnerability exists in WindLDR and WindO/I-NV4. If this vulnerability is exp... |
| CVE-2024-8362 | HIGH | 8.8 | 0.5% | Sep 3, 2024 | Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit hea... |
| CVE-2024-7970 | HIGH | 8.8 | 0.5% | Sep 3, 2024 | Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap... |
| CVE-2024-45394 | HIGH | 7.8 | 0.1% | Sep 3, 2024 | Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption... |
| CVE-2024-45391 | HIGH | 7.5 | 0.3% | Sep 3, 2024 | Tina is an open-source content management system (CMS). Sites building with Tina CMS's command line interface (CLI) prio... |
| CVE-2024-41436 | HIGH | 7.5 | 0.6% | Sep 3, 2024 | ClickHouse v24.3.3.102 was discovered to contain a buffer overflow via the component DB::evaluateConstantExpressionImpl. |
| CVE-2024-41435 | HIGH | 7.5 | 0.5% | Sep 3, 2024 | YugabyteDB v2.21.1.0 was discovered to contain a buffer overflow via the "insert into" parameter. |
| CVE-2024-42902 | HIGH | 8.8 | 1.0% | Sep 3, 2024 | An issue in the js_localize.php function of LimeSurvey v6.6.2 and before allows attackers to execute arbitrary code via ... |
| CVE-2024-38456 | HIGH | 7.8 | 0.2% | Sep 3, 2024 | HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and fo... |
| CVE-2024-6119 | HIGH | 7.5 | 66.6% | Sep 3, 2024 | Issue summary: Applications performing certificate name checks (e.g., TLS clients checking server certificates) may atte... |
| CVE-2024-42991 | HIGH | 8.1 | 0.8% | Sep 3, 2024 | MCMS v5.4.1 has front-end file upload vulnerability which can lead to remote command execution. |
| CVE-2024-8383 | HIGH | 7.5 | 0.6% | Sep 3, 2024 | Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that... |
| CVE-2024-8382 | HIGH | 8.8 | 0.6% | Sep 3, 2024 | Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for th... |
| CVE-2024-6232 | HIGH | 7.5 | 2.2% | Sep 3, 2024 | There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking... |
| CVE-2024-6473 | HIGH | 7.8 | 0.7% | Sep 3, 2024 | Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. |
| CVE-2024-45588 | HIGH | 8.1 | 0.4% | Sep 3, 2024 | This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on A... |
| CVE-2024-8374 | HIGH | 7.8 | 0.4% | Sep 3, 2024 | UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/p... |
| CVE-2024-45587 | HIGH | 8.8 | 0.4% | Sep 3, 2024 | This vulnerability exists in Symphony XTS Web Trading platform version 2.0.0.1_P160 due to improper access controls on A... |
| CVE-2024-45586 | HIGH | 8.8 | 0.4% | Sep 3, 2024 | This vulnerability exists due to improper access controls on APIs in the Authentication module of Symphony XTS Web Tradi... |
| CVE-2024-3655 | HIGH | 7.8 | 0.2% | Sep 3, 2024 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge... |
| CVE-2024-38811 | HIGH | 7.8 | 0.3% | Sep 3, 2024 | VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment var... |
| CVE-2024-7203 | HIGH | 7.2 | 1.3% | Sep 3, 2024 | A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.60 through V5.38 and... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now