2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6257 | HIGH | 8.8 | 1.0% | Jun 25, 2024 | HashiCorp’s go-getter library can be coerced into executing Git update on an existing maliciously modified Git Configura... |
| CVE-2024-5990 | HIGH | 7.5 | 2.3% | Jun 25, 2024 | Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread wi... |
| CVE-2024-39471 | HIGH | 7.1 | 0.2% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: add error handle to avoid out-of-bounds... |
| CVE-2024-39469 | HIGH | 7.1 | 0.2% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix nilfs_empty_dir() misjudgment and long ... |
| CVE-2024-39467 | HIGH | 7.1 | 0.2% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on i_xattr_nid in sani... |
| CVE-2024-39463 | HIGH | 7.8 | 0.3% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: 9p: add missing locking around taking dentry fid li... |
| CVE-2024-37085 | HIGH | 7.2 | 26.8% | Jun 25, 2024 | VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) per... |
| CVE-2024-37078 | HIGH | 7.1 | 0.3% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential kernel bug due to lack of wri... |
| CVE-2024-38952 | HIGH | 7.5 | 0.7% | Jun 25, 2024 | PX4-Autopilot v1.14.3 was discovered to contain a buffer overflow via the topic_name parameter at /logger/logged_topics.... |
| CVE-2024-21827 | HIGH | 7.2 | 0.9% | Jun 25, 2024 | A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Rou... |
| CVE-2024-6303 | HIGH | 8.8 | 0.4% | Jun 25, 2024 | Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another... |
| CVE-2024-6301 | HIGH | 7.5 | 0.2% | Jun 25, 2024 | Lack of validation of origin in federation API in Conduit, allowing any remote server to impersonate any user from any s... |
| CVE-2024-5216 | HIGH | 7.5 | 0.6% | Jun 25, 2024 | A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service (DoS) condition due to uncontrolled resourc... |
| CVE-2024-4640 | HIGH | 8.2 | 0.4% | Jun 25, 2024 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to missing bounds che... |
| CVE-2024-4639 | HIGH | 8.8 | 0.4% | Jun 25, 2024 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutrali... |
| CVE-2024-4638 | HIGH | 8.8 | 0.4% | Jun 25, 2024 | OnCell G3470A-LTE Series firmware versions v1.7.7 and prior have been identified as vulnerable due to a lack of neutrali... |
| CVE-2024-5431 | HIGH | 8.8 | 0.6% | Jun 25, 2024 | The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is v... |
| CVE-2024-4757 | HIGH | 8.1 | 0.5% | Jun 25, 2024 | The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanit... |
| CVE-2024-37007 | HIGH | 7.8 | 0.4% | Jun 25, 2024 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after... |
| CVE-2024-37006 | HIGH | 7.8 | 0.4% | Jun 25, 2024 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory cor... |
| CVE-2024-37005 | HIGH | 7.8 | 0.4% | Jun 25, 2024 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Rea... |
| CVE-2024-37004 | HIGH | 7.8 | 0.4% | Jun 25, 2024 | A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-f... |
| CVE-2024-37003 | HIGH | 7.8 | 0.3% | Jun 25, 2024 | A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications,... |
| CVE-2024-36999 | HIGH | 7.8 | 0.4% | Jun 25, 2024 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds W... |
| CVE-2024-23159 | HIGH | 7.8 | 0.3% | Jun 25, 2024 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to unini... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now