2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-40826 | MEDIUM | 6.1 | 0.2% | Sep 17, 2024 | A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoi... |
| CVE-2024-40825 | MEDIUM | 4.4 | 0.2% | Sep 17, 2024 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15, visionOS 2. A malicious app with ... |
| CVE-2024-40801 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14... |
| CVE-2024-40797 | MEDIUM | 6.1 | 0.5% | Sep 17, 2024 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, ... |
| CVE-2024-40790 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read ... |
| CVE-2024-27880 | MEDIUM | 5.5 | 0.3% | Sep 17, 2024 | An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 17.7 and iPadOS 17.... |
| CVE-2024-27876 | MEDIUM | 5.5 | 0.5% | Sep 17, 2024 | A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS... |
| CVE-2024-27875 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15. Privacy Indicators ... |
| CVE-2024-27869 | MEDIUM | 5.5 | 0.5% | Sep 17, 2024 | The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may ... |
| CVE-2024-27861 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be ab... |
| CVE-2024-27860 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An application may be ab... |
| CVE-2024-27858 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be a... |
| CVE-2024-23237 | MEDIUM | 5.5 | 0.2% | Sep 17, 2024 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to ca... |
| CVE-2024-6685 | MEDIUM | 4.3 | 0.4% | Sep 16, 2024 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5,... |
| CVE-2024-4283 | MEDIUM | 6.1 | 0.4% | Sep 16, 2024 | An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, a... |
| CVE-2024-8766 | MEDIUM | 6.7 | 0.1% | Sep 16, 2024 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec... |
| CVE-2024-45800 | MEDIUM | 5 | 0.3% | Sep 16, 2024 | Snappymail is an open source web-based email client. SnappyMail uses the `cleanHtml()` function to cleanup HTML and CSS ... |
| CVE-2024-42796 | MEDIUM | 5.9 | 0.2% | Sep 16, 2024 | An Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_genre in Kashipara Music Management... |
| CVE-2024-42795 | MEDIUM | 4.2 | 0.2% | Sep 16, 2024 | An Incorrect Access Control vulnerability was found in /music/view_user.php?id=3 and /music/controller.php?page=edit_use... |
| CVE-2024-42794 | MEDIUM | 4.7 | 0.3% | Sep 16, 2024 | Kashipara Music Management System v1.0 is vulnerable to Incorrect Access Control via /music/ajax.php?action=save_user. |
| CVE-2024-34016 | MEDIUM | 6.5 | 0.2% | Sep 16, 2024 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec... |
| CVE-2024-22013 | MEDIUM | 5.3 | 0.2% | Sep 16, 2024 | U-Boot environment is read from unauthenticated partition. |
| CVE-2024-45801 | MEDIUM | 6.1 | 0.8% | Sep 16, 2024 | DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. It has been discovered that m... |
| CVE-2024-45799 | MEDIUM | 6.1 | 0.3% | Sep 16, 2024 | FluxCP is a web-based Control Panel for rAthena servers written in PHP. A javascript injection is possible via venders/b... |
| CVE-2024-39910 | MEDIUM | 4.8 | 0.3% | Sep 16, 2024 | decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organiza... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now