2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11695 | MEDIUM | 5.4 | 0.4% | Nov 26, 2024 | A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resultin... |
| CVE-2024-11694 | MEDIUM | 6.1 | 0.5% | Nov 26, 2024 | Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS thr... |
| CVE-2024-11693 | CRITICAL | 9.8 | 0.8% | Nov 26, 2024 | The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Wind... |
| CVE-2024-11692 | MEDIUM | 4.3 | 0.5% | Nov 26, 2024 | An attacker could cause a select dropdown to be shown over another tab; this could have led to user confusion and possib... |
| CVE-2024-11691 | HIGH | 8.8 | 0.7% | Nov 26, 2024 | Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corrupti... |
| CVE-2024-51569 | HIGH | 7.5 | 1.2% | Nov 26, 2024 | Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI Number Of Completed Packets could l... |
| CVE-2024-47250 | MEDIUM | 5 | 0.7% | Nov 26, 2024 | Out-of-bounds Read vulnerability in Apache NimBLE. Missing proper validation of HCI advertising report could lead to ou... |
| CVE-2024-47249 | MEDIUM | 5 | 0.6% | Nov 26, 2024 | Improper Validation of Array Index vulnerability in Apache NimBLE. Lack of input validation for HCI events from control... |
| CVE-2024-47248 | MEDIUM | 6.3 | 0.7% | Nov 26, 2024 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Apache NimBLE. Specially crafte... |
| CVE-2024-38834 | MEDIUM | 4.8 | 0.3% | Nov 26, 2024 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to cl... |
| CVE-2024-38833 | MEDIUM | 5.4 | 0.4% | Nov 26, 2024 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to em... |
| CVE-2024-38832 | MEDIUM | 6.4 | 0.4% | Nov 26, 2024 | VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with editing access to vi... |
| CVE-2024-38831 | HIGH | 7.8 | 0.3% | Nov 26, 2024 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative... |
| CVE-2024-38830 | HIGH | 7.8 | 0.2% | Nov 26, 2024 | VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative ... |
| CVE-2024-8899 | MEDIUM | 4.3 | 0.4% | Nov 26, 2024 | The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in... |
| CVE-2024-50377 | MEDIUM | 6.5 | 0.2% | Nov 26, 2024 | A CWE-798 "Use of Hard-coded Credentials" was discovered affecting the following devices manufactured by Advantech: EKI-... |
| CVE-2024-50376 | MEDIUM | 5.2 | 0.5% | Nov 26, 2024 | A CWE-79 "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" was discovered affecting... |
| CVE-2024-50375 | CRITICAL | 9.8 | 1.0% | Nov 26, 2024 | A CWE-306 "Missing Authentication for Critical Function" was discovered affecting the following devices manufactured by ... |
| CVE-2024-50374 | CRITICAL | 9.8 | 1.5% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
| CVE-2024-50373 | CRITICAL | 9.8 | 1.3% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
| CVE-2024-50372 | CRITICAL | 9.8 | 1.3% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
| CVE-2024-50371 | CRITICAL | 9.8 | 1.3% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
| CVE-2024-50370 | CRITICAL | 9.8 | 1.5% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
| CVE-2024-50369 | HIGH | 7.2 | 1.0% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
| CVE-2024-50368 | HIGH | 7.2 | 1.0% | Nov 26, 2024 | A CWE-78 "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" was discovered aff... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now