2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-55564 | CRITICAL | 9.8 | 0.5% | Dec 9, 2024 | The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow. |
| CVE-2024-12355 | HIGH | 7.8 | 0.3% | Dec 9, 2024 | A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affecte... |
| CVE-2024-12354 | HIGH | 7.8 | 0.4% | Dec 9, 2024 | A vulnerability, which was classified as critical, was found in SourceCodester Phone Contact Manager System 1.0. Affecte... |
| CVE-2024-12353 | HIGH | 7.8 | 0.3% | Dec 9, 2024 | A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0.... |
| CVE-2024-12352 | CRITICAL | 9.8 | 0.7% | Dec 9, 2024 | A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affec... |
| CVE-2024-55563 | MEDIUM | 5.3 | 0.6% | Dec 9, 2024 | Bitcoin Core through 27.2 allows transaction-relay jamming via an off-chain protocol attack, a related issue to CVE-2024... |
| CVE-2024-12351 | HIGH | 8.8 | 0.5% | Dec 9, 2024 | A vulnerability classified as critical has been found in JFinalCMS 1.0. This affects the function findPage of the file s... |
| CVE-2024-12350 | HIGH | 8.8 | 3.6% | Dec 9, 2024 | A vulnerability was found in JFinalCMS 1.0. It has been rated as critical. Affected by this issue is the function update... |
| CVE-2024-12349 | HIGH | 8.8 | 0.4% | Dec 9, 2024 | A vulnerability was found in JFinalCMS 1.0. It has been declared as problematic. Affected by this vulnerability is an un... |
| CVE-2024-12348 | MEDIUM | 6.1 | 0.4% | Dec 9, 2024 | A vulnerability was found in Guizhou Xiaoma Technology jpress 5.1.2. It has been classified as problematic. Affected is ... |
| CVE-2024-12347 | MEDIUM | 6.9 | 0.6% | Dec 9, 2024 | A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms up to 1.0.0 and classified as critical. This ... |
| CVE-2024-12346 | MEDIUM | 5.3 | 0.4% | Dec 9, 2024 | A vulnerability has been found in Talentera up to 20241128 and classified as problematic. This vulnerability affects unk... |
| CVE-2024-55560 | CRITICAL | 9.8 | 0.6% | Dec 8, 2024 | MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persi... |
| CVE-2024-12344 | CRITICAL | 9.8 | 1.8% | Dec 8, 2024 | A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6.2.1021. This affects an unkno... |
| CVE-2024-12343 | HIGH | 8.8 | 4.7% | Dec 8, 2024 | A vulnerability classified as critical has been found in TP-Link VN020 F3v(T) TT_V6.2.1021. Affected is an unknown funct... |
| CVE-2024-12342 | HIGH | 7.1 | 8.9% | Dec 8, 2024 | A vulnerability was found in TP-Link VN020 F3v(T) TT_V6.2.1021. It has been rated as critical. This issue affects some u... |
| CVE-2024-12209 | CRITICAL | 9.8 | 15.0% | Dec 8, 2024 | The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all ve... |
| CVE-2024-53473 | HIGH | 7.5 | 0.6% | Dec 7, 2024 | WeGIA 3.2.0 before 3998672 does not verify permission to change a password. |
| CVE-2024-47107 | MEDIUM | 5.4 | 0.2% | Dec 7, 2024 | IBM QRadar SIEM 7.5 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed... |
| CVE-2024-41762 | MEDIUM | 6.5 | 0.4% | Dec 7, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of serv... |
| CVE-2024-47115 | HIGH | 7.8 | 0.2% | Dec 7, 2024 | IBM AIX 7.2, 7.3 and VIOS 3.1 and 4.1 could allow a local user to execute arbitrary commands on the system due to improp... |
| CVE-2024-37071 | MEDIUM | 6.5 | 0.4% | Dec 7, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user... |
| CVE-2024-11501 | HIGH | 8.8 | 0.6% | Dec 7, 2024 | The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via des... |
| CVE-2024-11464 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Easy Code Snippets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in ... |
| CVE-2024-11457 | MEDIUM | 6.1 | 0.3% | Dec 7, 2024 | The Feedpress Generator – External RSS Frontend Customizer plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now