2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43476 | MEDIUM | 5.4 | 0.8% | Sep 10, 2024 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
| CVE-2024-38256 | MEDIUM | 5.5 | 0.7% | Sep 10, 2024 | Windows Kernel-Mode Driver Information Disclosure Vulnerability |
| CVE-2024-38254 | MEDIUM | 6.2 | 0.7% | Sep 10, 2024 | Windows Authentication Information Disclosure Vulnerability |
| CVE-2024-38235 | MEDIUM | 6.5 | 0.7% | Sep 10, 2024 | Windows Hyper-V Denial of Service Vulnerability |
| CVE-2024-38234 | MEDIUM | 6.5 | 0.9% | Sep 10, 2024 | Windows Networking Denial of Service Vulnerability |
| CVE-2024-38217 | MEDIUM | 5.4 | 9.8% | Sep 10, 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-37342 | MEDIUM | 4.3 | 1.7% | Sep 10, 2024 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability |
| CVE-2024-37337 | MEDIUM | 4.3 | 1.7% | Sep 10, 2024 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability |
| CVE-2024-6876 | MEDIUM | 4.4 | 0.2% | Sep 10, 2024 | Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited interna... |
| CVE-2024-45592 | MEDIUM | 6.1 | 0.4% | Sep 10, 2024 | auditor-bundle, formerly known as DoctrineAuditBundle, integrates auditor library into any Symfony 3.4+ application. Pri... |
| CVE-2024-45591 | MEDIUM | 5.3 | 3.4% | Sep 10, 2024 | XWiki Platform is a generic wiki platform. The REST API exposes the history of any page in XWiki of which the attacker k... |
| CVE-2024-45407 | MEDIUM | 5.3 | 0.3% | Sep 10, 2024 | Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing proce... |
| CVE-2024-44815 | MEDIUM | 4.6 | 0.6% | Sep 10, 2024 | Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credent... |
| CVE-2024-44676 | MEDIUM | 4.8 | 0.5% | Sep 10, 2024 | eladmin v2.7 and before is vulnerable to Cross Site Scripting (XSS) which allows an attacker to execute arbitrary code v... |
| CVE-2024-45393 | MEDIUM | 6.4 | 0.2% | Sep 10, 2024 | Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacke... |
| CVE-2024-43800 | MEDIUM | 4.7 | 0.6% | Sep 10, 2024 | serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() ma... |
| CVE-2024-43799 | MEDIUM | 4.7 | 0.5% | Sep 10, 2024 | Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendS... |
| CVE-2024-43796 | MEDIUM | 4.7 | 0.5% | Sep 10, 2024 | Express.js minimalist web framework for node. In express < 4.20.0, passing untrusted user input - even after sanitizing ... |
| CVE-2024-35282 | MEDIUM | 4.6 | 0.2% | Sep 10, 2024 | A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all ver... |
| CVE-2024-31490 | MEDIUM | 6.5 | 0.5% | Sep 10, 2024 | An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4... |
| CVE-2024-27257 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source... |
| CVE-2024-25074 | MEDIUM | 5.9 | 0.4% | Sep 10, 2024 | An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos... |
| CVE-2024-25073 | MEDIUM | 5.9 | 0.4% | Sep 10, 2024 | An issue was discovered in Samsung Semiconductor Mobile Processor and Modem Exynos 9820, Exynos 9825, Exynos 980, Exynos... |
| CVE-2024-23184 | MEDIUM | 5 | 0.8% | Sep 10, 2024 | Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive. With 100k header l... |
| CVE-2024-21753 | MEDIUM | 6 | 0.7% | Sep 10, 2024 | A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now