2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31163 | HIGH | 7.2 | 0.6% | Jun 14, 2024 | ASUS Download Master has a buffer overflow vulnerability. An unauthenticated remote attacker with administrative privile... |
| CVE-2024-31162 | HIGH | 7.2 | 0.6% | Jun 14, 2024 | The specific function parameter of ASUS Download Master does not properly filter user input. An unauthenticated remote a... |
| CVE-2024-5551 | HIGH | 8.8 | 0.3% | Jun 14, 2024 | The WP STAGING Pro WordPress Backup Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versi... |
| CVE-2024-3498 | HIGH | 7.8 | 0.3% | Jun 14, 2024 | Attackers can then execute malicious files by enabling certain services of the printer via the web configuration page an... |
| CVE-2024-3497 | HIGH | 8.8 | 0.7% | Jun 14, 2024 | Path traversal vulnerability in the web server of the Toshiba printer enables attacker to overwrite orginal files or add... |
| CVE-2024-3496 | HIGH | 8.8 | 0.7% | Jun 14, 2024 | Attackers can bypass the web login authentication process to gain access to the printer's system information and upload ... |
| CVE-2024-1094 | HIGH | 7.3 | 0.5% | Jun 14, 2024 | The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress... |
| CVE-2024-31161 | HIGH | 7.2 | 0.5% | Jun 14, 2024 | The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrati... |
| CVE-2024-27178 | HIGH | 7.2 | 1.5% | Jun 14, 2024 | An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name var... |
| CVE-2024-27177 | HIGH | 7.2 | 1.5% | Jun 14, 2024 | An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying package name ... |
| CVE-2024-27176 | HIGH | 7.2 | 1.5% | Jun 14, 2024 | An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying session ID var... |
| CVE-2024-27171 | HIGH | 7.4 | 0.5% | Jun 14, 2024 | A remote attacker using the insecure upload functionality will be able to overwrite any Python file and get Remote Code ... |
| CVE-2024-27170 | HIGH | 7.4 | 0.3% | Jun 14, 2024 | It was observed that all the Toshiba printers contain credentials used for WebDAV access in the readable file. Then, it ... |
| CVE-2024-27169 | HIGH | 8.4 | 0.3% | Jun 14, 2024 | Toshiba printers provides API without authentication for internal access. A local attacker can bypass authentication in ... |
| CVE-2024-27168 | HIGH | 7.1 | 0.3% | Jun 14, 2024 | It appears that some hardcoded keys are used for authentication to internal API. Knowing these private keys may allow at... |
| CVE-2024-27167 | HIGH | 7.4 | 0.2% | Jun 14, 2024 | Toshiba printers use Sendmail to send emails to recipients. Sendmail is used with several insecure directories. A local ... |
| CVE-2024-27166 | HIGH | 7.4 | 0.2% | Jun 14, 2024 | Coredump binaries in Toshiba printers have incorrect permissions. A local attacker can steal confidential information. A... |
| CVE-2024-27165 | HIGH | 7.8 | 0.2% | Jun 14, 2024 | Toshiba printers contain a suidperl binary and it has a Local Privilege Escalation vulnerability. A local attacker can g... |
| CVE-2024-27164 | HIGH | 7.1 | 0.3% | Jun 14, 2024 | Toshiba printers contain hardcoded credentials. As for the affected products/models/versions, see the reference URL. |
| CVE-2024-27158 | HIGH | 7.4 | 0.3% | Jun 14, 2024 | All the Toshiba printers share the same hardcoded root password. As for the affected products/models/versions, see the r... |
| CVE-2024-27155 | HIGH | 7.7 | 0.4% | Jun 14, 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise a... |
| CVE-2024-3079 | HIGH | 7.2 | 0.8% | Jun 14, 2024 | Certain models of ASUS routers have buffer overflow vulnerabilities, allowing remote attackers with administrative privi... |
| CVE-2024-27153 | HIGH | 7.4 | 0.2% | Jun 14, 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise a... |
| CVE-2024-27152 | HIGH | 7.4 | 0.2% | Jun 14, 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise a... |
| CVE-2024-27151 | HIGH | 7.4 | 0.4% | Jun 14, 2024 | The Toshiba printers are vulnerable to a Local Privilege Escalation vulnerability. An attacker can remotely compromise a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now