2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34642 | MEDIUM | 4.6 | 0.2% | Sep 4, 2024 | Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access se... |
| CVE-2024-34639 | MEDIUM | 4.6 | 0.2% | Sep 4, 2024 | Improper handling of exceptional conditions in Setupwizard prior to SMR Aug-2024 Release 1 allows physical attackers to ... |
| CVE-2024-34637 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Improper access control in WindowManagerService prior to SMR Sep-2024 Release 1 in Android 12, and SMR Jun-2024 Release ... |
| CVE-2024-8298 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may a... |
| CVE-2024-45449 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vuln... |
| CVE-2024-45448 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Page table protection configuration vulnerability in the trusted firmware module Impact: Successful exploitation of this... |
| CVE-2024-45447 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Access control vulnerability in the camera framework module Impact: Successful exploitation of this vulnerability may af... |
| CVE-2024-45446 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Access permission verification vulnerability in the camera driver module Impact: Successful exploitation of this vulnera... |
| CVE-2024-45445 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this v... |
| CVE-2024-45444 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may... |
| CVE-2024-41927 | MEDIUM | 4.6 | 0.2% | Sep 4, 2024 | Cleartext transmission of sensitive information vulnerability exists in multiple IDEC PLCs. If an attacker sends a speci... |
| CVE-2024-45619 | MEDIUM | 4.3 | 0.3% | Sep 3, 2024 | A vulnerability was found in OpenSC, OpenSC tools, PKCS#11 module, minidriver, and CTK. An attacker could use a crafted ... |
| CVE-2024-8399 | MEDIUM | 4.7 | 0.3% | Sep 3, 2024 | Websites could utilize Javascript links to spoof URL addresses in the Focus navigation bar This vulnerability affects Fo... |
| CVE-2024-4629 | MEDIUM | 6.5 | 0.8% | Sep 3, 2024 | A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the tim... |
| CVE-2024-45678 | MEDIUM | 4.2 | 0.3% | Sep 3, 2024 | Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECD... |
| CVE-2024-45389 | MEDIUM | 5.4 | 0.4% | Sep 3, 2024 | Pagefind, a fully static search library, initializes its dynamic JavaScript and WebAssembly files relative to the locati... |
| CVE-2024-45180 | MEDIUM | 5.4 | 0.2% | Sep 3, 2024 | SquaredUp DS for SCOM 6.2.1.11104 allows XSS. |
| CVE-2024-41434 | MEDIUM | 4.3 | 0.4% | Sep 3, 2024 | PingCAP TiDB v8.1.0 was discovered to contain a buffer overflow via the component (*Column).GetDecimal. This allows atta... |
| CVE-2024-43803 | MEDIUM | 4.9 | 0.6% | Sep 3, 2024 | The Bare Metal Operator (BMO) implements a Kubernetes API for managing bare metal hosts in Metal3. The `BareMetalHost` (... |
| CVE-2024-43413 | MEDIUM | 4.8 | 0.3% | Sep 3, 2024 | Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cr... |
| CVE-2024-42904 | MEDIUM | 6.1 | 0.3% | Sep 3, 2024 | A cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows attackers to execute arbitrary web scripts or HTML vi... |
| CVE-2024-42903 | MEDIUM | 6.5 | 0.5% | Sep 3, 2024 | A Host header injection vulnerability in the password reset function of LimeSurvey v.6.6.1+240806 and before allows atta... |
| CVE-2024-42901 | MEDIUM | 4.8 | 0.4% | Sep 3, 2024 | A CSV injection vulnerability in Lime Survey v6.5.12 allows attackers to execute arbitrary code via uploading a crafted ... |
| CVE-2024-43412 | MEDIUM | 5.4 | 0.3% | Sep 3, 2024 | Xibo is an open source digital signage platform with a web content management system (CMS). Prior to version 4.1.0, a cr... |
| CVE-2024-7654 | MEDIUM | 6.1 | 0.3% | Sep 3, 2024 | An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-dis... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now