2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-39573 | HIGH | 7.5 | 35.4% | Jul 1, 2024 | Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules t... |
| CVE-2024-38477 | HIGH | 7.5 | 3.2% | Jul 1, 2024 | null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server vi... |
| CVE-2024-38473 | HIGH | 8.1 | 25.9% | Jul 1, 2024 | Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be... |
| CVE-2024-38472 | HIGH | 7.5 | 68.0% | Jul 1, 2024 | SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and maliciou... |
| CVE-2024-37298 | HIGH | 7.5 | 1.1% | Jul 1, 2024 | gorilla/schema converts structs to and from form values. Prior to version 1.4.1 Running `schema.Decoder.Decode()` on a s... |
| CVE-2024-36997 | HIGH | 8.1 | 0.5% | Jul 1, 2024 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin... |
| CVE-2024-36991 | HIGH | 7.5 | 13.1% | Jul 1, 2024 | In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on t... |
| CVE-2024-36985 | HIGH | 8.8 | 6.5% | Jul 1, 2024 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or powe... |
| CVE-2024-36984 | HIGH | 8.8 | 1.4% | Jul 1, 2024 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 on Windows, an authenticated user could execute a specially... |
| CVE-2024-36983 | HIGH | 8.8 | 1.0% | Jul 1, 2024 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9... |
| CVE-2024-36982 | HIGH | 7.5 | 0.5% | Jul 1, 2024 | In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109 and 9... |
| CVE-2024-21586 | HIGH | 7.5 | 0.5% | Jul 1, 2024 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N... |
| CVE-2024-36421 | HIGH | 7.5 | 8.5% | Jul 1, 2024 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, A ... |
| CVE-2024-36420 | HIGH | 7.5 | 1.8% | Jul 1, 2024 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, th... |
| CVE-2024-23380 | HIGH | 7.8 | 0.2% | Jul 1, 2024 | Memory corruption while handling user packets during VBO bind operation. |
| CVE-2024-23373 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption when IOMMU unmap operation fails, the DMA and anon buffers are getting released. |
| CVE-2024-23372 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption while invoking IOCTL call for GPU memory allocation and size param is greater than expected size. |
| CVE-2024-23368 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption when allocating and accessing an entry in an SMEM partition. |
| CVE-2024-21482 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of th... |
| CVE-2024-21469 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption when an invoke call and a TEE call are bound for the same trusted application. |
| CVE-2024-21466 | HIGH | 7.5 | 0.2% | Jul 1, 2024 | Information disclosure while parsing sub-IE length during new IE generation. |
| CVE-2024-21465 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption while processing key blob passed by the user. |
| CVE-2024-21461 | HIGH | 7.8 | 0.1% | Jul 1, 2024 | Memory corruption while performing finish HMAC operation when context is freed by keymaster. |
| CVE-2024-21458 | HIGH | 7.5 | 0.2% | Jul 1, 2024 | Information disclosure while handling SA query action frame. |
| CVE-2024-21457 | HIGH | 7.5 | 0.2% | Jul 1, 2024 | INformation disclosure while handling Multi-link IE in beacon frame. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now