2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-38322 | HIGH | 7.5 | 0.4% | Jun 28, 2024 | IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 agent username and password error response discrepancy exp... |
| CVE-2024-35116 | HIGH | 7.5 | 0.7% | Jun 28, 2024 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error app... |
| CVE-2024-27629 | HIGH | 7.8 | 0.2% | Jun 28, 2024 | An issue in dc2niix before v.1.0.20240202 allows a local attacker to execute arbitrary code via the generated file name ... |
| CVE-2024-27628 | HIGH | 8.1 | 0.7% | Jun 28, 2024 | Buffer Overflow vulnerability in DCMTK v.3.6.8 allows an attacker to execute arbitrary code via the EctEnhancedCT method... |
| CVE-2024-38374 | HIGH | 7.5 | 0.6% | Jun 28, 2024 | The CycloneDX core module provides a model representation of the SBOM along with utilities to assist in creating, valida... |
| CVE-2024-37905 | HIGH | 8.8 | 0.8% | Jun 28, 2024 | authentik is an open-source Identity Provider that emphasizes flexibility and versatility. Authentik API-Access-Token me... |
| CVE-2024-31919 | HIGH | 7.5 | 0.5% | Jun 28, 2024 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service at... |
| CVE-2024-31912 | HIGH | 8.8 | 0.4% | Jun 28, 2024 | IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations du... |
| CVE-2024-29039 | HIGH | 8.1 | 1.0% | Jun 28, 2024 | tpm2 is the source repository for the Trusted Platform Module (TPM2.0) tools. This vulnerability allows attackers to man... |
| CVE-2024-5736 | HIGH | 7.5 | 1.2% | Jun 28, 2024 | Server Side Request Forgery (SSRF) vulnerability in AdmirorFrames Joomla! extension in afGdStream.php script allows to a... |
| CVE-2024-5735 | HIGH | 7.5 | 1.5% | Jun 28, 2024 | Full Path Disclosure vulnerability in AdmirorFrames Joomla! extension in afHelper.php script allows an unauthorised atta... |
| CVE-2024-30135 | HIGH | 7.5 | 0.3% | Jun 28, 2024 | HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot ... |
| CVE-2024-39350 | HIGH | 7.5 | 0.7% | Jun 28, 2024 | A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-m... |
| CVE-2024-39348 | HIGH | 7.5 | 0.3% | Jun 28, 2024 | Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before... |
| CVE-2024-30111 | HIGH | 7.5 | 0.3% | Jun 28, 2024 | HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app ca... |
| CVE-2024-39351 | HIGH | 7.2 | 1.5% | Jun 28, 2024 | A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is ... |
| CVE-2024-39708 | HIGH | 7 | 0.2% | Jun 28, 2024 | An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096... |
| CVE-2024-4395 | HIGH | 7.8 | 0.2% | Jun 27, 2024 | The XPC service within the audit functionality of Jamf Compliance Editor before version 1.3.1 on macOS can lead to local... |
| CVE-2024-39134 | HIGH | 7.5 | 0.6% | Jun 27, 2024 | A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_f... |
| CVE-2024-36074 | HIGH | 7.2 | 0.8% | Jun 27, 2024 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnera... |
| CVE-2024-36073 | HIGH | 7.2 | 0.8% | Jun 27, 2024 | Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnera... |
| CVE-2024-39207 | HIGH | 8.2 | 0.5% | Jun 27, 2024 | lua-shmem v1.0-1 was discovered to contain a buffer overflow via the shmem_write function. |
| CVE-2024-39130 | HIGH | 7.5 | 0.5% | Jun 27, 2024 | A NULL Pointer Dereference discovered in DumpTS v0.1.0-nightly allows attackers to cause a denial of service via the fun... |
| CVE-2024-38523 | HIGH | 7.5 | 0.5% | Jun 27, 2024 | Hush Line is a free and open-source, anonymous-tip-line-as-a-service for organizations or individuals. The TOTP authenti... |
| CVE-2024-6250 | HIGH | 7.5 | 2.0% | Jun 27, 2024 | An absolute path traversal vulnerability exists in parisneo/lollms-webui v9.6, specifically in the `open_file` endpoint ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now