2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-38519 | HIGH | 7.8 | 0.3% | Jul 2, 2024 | `yt-dlp` and `youtube-dl` are command-line audio/video downloaders. Prior to the fixed versions, `yt-dlp` and `youtube-d... |
| CVE-2024-34122 | HIGH | 7.8 | 0.3% | Jul 2, 2024 | Acrobat for Edge versions 126.0.2592.68 and earlier are affected by an out-of-bounds read vulnerability when parsing a c... |
| CVE-2024-34596 | HIGH | 7.5 | 0.5% | Jul 2, 2024 | Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for... |
| CVE-2024-34595 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Improper access control in clickAdapterItem of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch... |
| CVE-2024-34593 | HIGH | 8.8 | 0.6% | Jul 2, 2024 | Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows re... |
| CVE-2024-34585 | HIGH | 7.8 | 0.1% | Jul 2, 2024 | Improper access control in launchApp of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to launch privil... |
| CVE-2024-20901 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Improper input validation in copying data to buffer cache in libsaped prior to SMR Jul-2024 Release 1 allows local attac... |
| CVE-2024-20893 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Improper input validation in libmediaextractorservice.so prior to SMR Jul-2024 Release 1 allows local attackers to trigg... |
| CVE-2024-20892 | HIGH | 7.8 | 0.1% | Jul 2, 2024 | Improper verification of signature in FilterProvider prior to SMR Jul-2024 Release 1 allows local attackers to execute p... |
| CVE-2024-20891 | HIGH | 7.8 | 0.1% | Jul 2, 2024 | Improper access control in launchFullscreenIntent of SystemUI prior to SMR Jul-2024 Release 1 allows local attackers to ... |
| CVE-2024-20890 | HIGH | 8.8 | 0.2% | Jul 2, 2024 | Improper input validation in BLE prior to SMR Jul-2024 Release 1 allows adjacent attackers to trigger abnormal behavior. |
| CVE-2024-20888 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Improper access control in OneUIHome prior to SMR Jul-2024 Release 1 allows local attackers to launch privileged activit... |
| CVE-2024-4836 | HIGH | 7.5 | 2.6% | Jul 2, 2024 | Web services managed by Edito CMS (Content Management System) in versions from 3.5 through 3.25 leak sensitive data as t... |
| CVE-2024-37479 | HIGH | 8.8 | 0.4% | Jul 2, 2024 | Local File Inclusion vulnerability in LA-Studio LA-Studio Element Kit for Elementor via "LaStudioKit Progress Bar" widge... |
| CVE-2024-32853 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A... |
| CVE-2024-32852 | HIGH | 7.5 | 0.2% | Jul 2, 2024 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerab... |
| CVE-2024-5767 | HIGH | 8.8 | 0.3% | Jul 2, 2024 | The sitetweet WordPress plugin through 0.2 does not have CSRF check in some places, and is missing sanitisation as well ... |
| CVE-2024-5606 | HIGH | 8.8 | 0.6% | Jul 2, 2024 | The Quiz and Survey Master (QSM) WordPress plugin before 9.0.2 is vulnerable does not validate and escape the question_... |
| CVE-2024-5349 | HIGH | 8.8 | 1.0% | Jul 2, 2024 | The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to... |
| CVE-2024-4679 | HIGH | 7.8 | 0.2% | Jul 2, 2024 | Incorrect Default Permissions vulnerability in Hitachi JP1/Extensible SNMP Agent for Windows, Hitachi JP1/Extensible SNM... |
| CVE-2024-37765 | HIGH | 8.8 | 0.8% | Jul 1, 2024 | Machform up to version 19 is affected by an authenticated Blind SQL injection in the user account settings page. |
| CVE-2024-23736 | HIGH | 8.8 | 0.1% | Jul 1, 2024 | Cross Site Request Forgery (CSRF) vulnerability in savignano S/Notify before 4.0.2 for Confluence allows attackers to ma... |
| CVE-2024-32230 | HIGH | 7.8 | 0.4% | Jul 1, 2024 | FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in... |
| CVE-2024-32229 | HIGH | 8.4 | 0.3% | Jul 1, 2024 | FFmpeg 7.0 contains a heap-buffer-overflow at libavfilter/vf_tiltandshift.c:189:5 in copy_column. |
| CVE-2024-39249 | HIGH | 7.5 | 0.8% | Jul 1, 2024 | Async <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in aut... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now