2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6292 | HIGH | 8.8 | 0.5% | Jun 24, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap co... |
| CVE-2024-6291 | HIGH | 8.8 | 0.5% | Jun 24, 2024 | Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit ... |
| CVE-2024-6290 | HIGH | 8.8 | 0.5% | Jun 24, 2024 | Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap co... |
| CVE-2024-36682 | HIGH | 7.5 | 0.4% | Jun 24, 2024 | In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can download all ema... |
| CVE-2024-34991 | HIGH | 7.5 | 0.4% | Jun 24, 2024 | In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credi... |
| CVE-2024-37677 | HIGH | 7.5 | 0.5% | Jun 24, 2024 | An issue in Shenzhen Weitillage Industrial Co., Ltd the access management specialist V6.62.51215 allows a remote attacke... |
| CVE-2024-38373 | HIGH | 8.1 | 0.6% | Jun 24, 2024 | FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a b... |
| CVE-2024-6287 | HIGH | 7.8 | 0.2% | Jun 24, 2024 | Incorrect Calculation vulnerability in Renesas arm-trusted-firmware allows Local Execution of Code. When checking whet... |
| CVE-2024-33687 | HIGH | 7.5 | 0.2% | Jun 24, 2024 | Insufficient verification of data authenticity issue exists in NJ Series CPU Unit all versions and NX Series CPU Unit al... |
| CVE-2024-4748 | HIGH | 7.8 | 1.1% | Jun 24, 2024 | The CRUDDIY project is vulnerable to shell command injection via sending a crafted POST request to the application serve... |
| CVE-2024-39291 | HIGH | 7.8 | 0.2% | Jun 24, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_... |
| CVE-2024-38667 | HIGH | 7.8 | 0.2% | Jun 24, 2024 | In the Linux kernel, the following vulnerability has been resolved: riscv: prevent pt_regs corruption for secondary idl... |
| CVE-2024-38664 | HIGH | 7.8 | 0.2% | Jun 24, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dpsub: Always register bridge We must ... |
| CVE-2024-38384 | HIGH | 7.8 | 0.2% | Jun 24, 2024 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix list corruption from reorder of WRI... |
| CVE-2024-34027 | HIGH | 7.8 | 0.2% | Jun 24, 2024 | In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to cover {reserve,release}_comp... |
| CVE-2024-5862 | HIGH | 7.5 | 0.5% | Jun 24, 2024 | Improper Restriction of Excessive Authentication Attempts vulnerability in Mia Technology Inc. Mia-Med Health Aplication... |
| CVE-2024-37111 | HIGH | 7.5 | 0.5% | Jun 24, 2024 | Missing Authorization vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from ... |
| CVE-2024-37109 | HIGH | 8.8 | 0.5% | Jun 24, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in Membership Software WishList Member X allows ... |
| CVE-2024-37107 | HIGH | 8.8 | 0.4% | Jun 24, 2024 | Improper Privilege Management vulnerability in Membership Software WishList Member X allows Privilege Escalation.This is... |
| CVE-2024-37092 | HIGH | 8.8 | 0.5% | Jun 24, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consultin... |
| CVE-2024-37091 | HIGH | 8.8 | 1.2% | Jun 24, 2024 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Cons... |
| CVE-2024-36496 | HIGH | 7.5 | 0.7% | Jun 24, 2024 | The configuration file is encrypted with a static key derived from a static five-character password which allows an att... |
| CVE-2024-36495 | HIGH | 7.7 | 0.3% | Jun 24, 2024 | The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file syst... |
| CVE-2024-24554 | HIGH | 8.2 | 0.2% | Jun 24, 2024 | Bludit uses predictable methods in combination with the MD5 hashing algorithm to generate sensitive tokens such as the A... |
| CVE-2024-24553 | HIGH | 7.5 | 0.2% | Jun 24, 2024 | Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now