2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-46690 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd4_deleg_getattr_conflict in presence ... |
| CVE-2024-46689 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB ... |
| CVE-2024-46688 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: erofs: fix out-of-bound access when z_erofs_gbuf_gr... |
| CVE-2024-46686 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2_... |
| CVE-2024-46685 | MEDIUM | 5.5 | 0.3% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in ... |
| CVE-2024-46684 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: fix AUXV size calculation when EL... |
| CVE-2024-46682 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: nfsd: prevent panic for nfsv4.0 closed files in nfs... |
| CVE-2024-46681 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: pktgen: use cpus_read_lock() in pg_net_init() I ha... |
| CVE-2024-46680 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while r... |
| CVE-2024-46679 | MEDIUM | 4.7 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link ... |
| CVE-2024-46678 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: bonding: change ipsec_lock from spin lock to mutex ... |
| CVE-2024-46677 | MEDIUM | 5.5 | 0.3% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When... |
| CVE-2024-46676 | MEDIUM | 5.5 | 0.2% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In cas... |
| CVE-2024-46675 | MEDIUM | 5.5 | 0.3% | Sep 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buf... |
| CVE-2024-8656 | MEDIUM | 6.1 | 0.4% | Sep 13, 2024 | The WPFactory Helper plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_ar... |
| CVE-2024-43180 | MEDIUM | 4.3 | 0.2% | Sep 13, 2024 | IBM Concert 1.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to g... |
| CVE-2024-45607 | MEDIUM | 5.3 | 14.1% | Sep 12, 2024 | whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload va... |
| CVE-2024-8311 | MEDIUM | 6.5 | 0.5% | Sep 12, 2024 | An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, ... |
| CVE-2024-4472 | MEDIUM | 5.5 | 0.2% | Sep 12, 2024 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.5 prior to 17.1.7, starting from 17.2 pr... |
| CVE-2024-45383 | MEDIUM | 5 | 1.5% | Sep 12, 2024 | A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus ... |
| CVE-2024-45303 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | Discourse Calendar plugin adds the ability to create a dynamic calendar in the first post of a topic to Discourse. Rende... |
| CVE-2024-45182 | MEDIUM | 5.5 | 0.2% | Sep 12, 2024 | An issue was discovered in WibuKey64.sys in WIBU-SYSTEMS WibuKey before v6.70 and fixed in v.6.70 An improper bounds che... |
| CVE-2024-34336 | MEDIUM | 5.3 | 0.4% | Sep 12, 2024 | User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists i... |
| CVE-2024-34335 | MEDIUM | 6.1 | 0.3% | Sep 12, 2024 | ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability ... |
| CVE-2024-25270 | MEDIUM | 4.3 | 0.4% | Sep 12, 2024 | An issue in Mirapolis LMS 4.6.XX allows authenticated users to exploit an Insecure Direct Object Reference (IDOR) vulner... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now