2024 CVE Vulnerabilities

39,258 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-33500HIGH7.4A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.11.0), Mendix Application...
CVE-2024-35716HIGH8.8Missing Authorization vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic ...
CVE-2024-35692HIGH7.3Missing Authorization vulnerability in Termly Cookie Consent.This issue affects Cookie Consent: from n/a through 3.2.
CVE-2024-4266HIGH7.5The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Sens...
CVE-2024-34688HIGH7.5Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS att...
CVE-2024-37177HIGH8.1SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are expo...
CVE-2024-37130HIGH7.8Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability v...
CVE-2024-37289HIGH7.8An improper access control vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on ...
CVE-2024-37166HIGH8.9ghtml is software that uses tagged templates for template engine functionality. It is possible to introduce user-control...
CVE-2024-36471HIGH7.5Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL.  Project adm...
CVE-2024-36358HIGH7.8A link following vulnerability in Trend Micro Deep Security 20.x agents below build 20.0.1-3180 could allow a local atta...
CVE-2024-36305HIGH7.8A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privilege...
CVE-2024-36304HIGH7A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a loca...
CVE-2024-36303HIGH7.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p...
CVE-2024-36302HIGH7.8An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate p...
CVE-2024-35242HIGH8.8Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `composer install` c...
CVE-2024-35241HIGH8.8Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the `status`, `reinstall...
CVE-2024-32849HIGH7.8Trend Micro Security 17.x (Consumer) is vulnerable to a Privilege Escalation vulnerability that could allow a local atta...
CVE-2024-36418HIGH8.8SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6...
CVE-2024-27857HIGH7.8An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.5 and iPadOS 17...
CVE-2024-27855HIGH8.8The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 1...
CVE-2024-27851HIGH8.8The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS...
CVE-2024-27848HIGH7.8This issue was addressed with improved permissions checking. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sono...
CVE-2024-27836HIGH7.8The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, vision...
CVE-2024-27833HIGH8.8An integer overflow was addressed with improved input validation. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPa...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now