2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-42267 | MEDIUM | 5.5 | 0.2% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_f... |
| CVE-2024-42266 | MEDIUM | 5.5 | 0.2% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: make cow_file_range_inline() honor locked_pa... |
| CVE-2024-42265 | MEDIUM | 5.5 | 0.3% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mis... |
| CVE-2024-42263 | MEDIUM | 5.5 | 0.2% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the timestamp... |
| CVE-2024-42262 | MEDIUM | 5.5 | 0.2% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix potential memory leak in the performan... |
| CVE-2024-42261 | MEDIUM | 5.5 | 0.2% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Validate passed in drm syncobj handles in ... |
| CVE-2024-42260 | MEDIUM | 5.5 | 0.2% | Aug 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Validate passed in drm syncobj handles in ... |
| CVE-2024-43011 | MEDIUM | 4.9 | 0.7% | Aug 16, 2024 | An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to i... |
| CVE-2024-43009 | MEDIUM | 4.7 | 0.4% | Aug 16, 2024 | A reflected cross-site scripting (XSS) vulnerability exists in user/login.php at line 24 in ZZCMS 2023 and earlier. The ... |
| CVE-2024-43006 | MEDIUM | 5.4 | 0.2% | Aug 16, 2024 | A stored cross-site scripting (XSS) vulnerability exists in ZZCMS2023 in the ask/show.php file at line 21. An attacker c... |
| CVE-2024-43005 | MEDIUM | 4.7 | 0.3% | Aug 16, 2024 | A reflected cross-site scripting (XSS) vulnerability in the component dl_liuyan_save.php of ZZCMS v2023 allows attackers... |
| CVE-2024-42849 | MEDIUM | 6.5 | 1.3% | Aug 16, 2024 | An issue in Silverpeas v.6.4.2 and lower allows a remote attacker to cause a denial of service via the password change f... |
| CVE-2024-42758 | MEDIUM | 5.4 | 0.7% | Aug 16, 2024 | A Cross-site Scripting (XSS) vulnerability exists in version v2024-01-05 of the indexmenu plugin when is used and enable... |
| CVE-2024-25837 | MEDIUM | 5.4 | 0.2% | Aug 16, 2024 | A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to exe... |
| CVE-2024-6098 | MEDIUM | 5.9 | 0.4% | Aug 16, 2024 | When performing an online tag generation to devices which communicate using the ControlLogix protocol, a machine-in-the... |
| CVE-2024-6004 | MEDIUM | 6.5 | 0.3% | Aug 16, 2024 | A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a... |
| CVE-2024-5210 | MEDIUM | 6.5 | 0.3% | Aug 16, 2024 | A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a... |
| CVE-2024-5209 | MEDIUM | 6.5 | 0.3% | Aug 16, 2024 | A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a... |
| CVE-2024-4782 | MEDIUM | 6.5 | 0.3% | Aug 16, 2024 | A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a... |
| CVE-2024-4781 | MEDIUM | 6.5 | 0.3% | Aug 16, 2024 | A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a... |
| CVE-2024-43810 | MEDIUM | 5.4 | 0.3% | Aug 16, 2024 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible in the AWS Core plugin |
| CVE-2024-43809 | MEDIUM | 6.1 | 0.3% | Aug 16, 2024 | In JetBrains TeamCity before 2024.07.1 reflected XSS was possible on the agentPushPreset page |
| CVE-2024-43808 | MEDIUM | 5.4 | 0.2% | Aug 16, 2024 | In JetBrains TeamCity before 2024.07.1 self XSS was possible in the HashiCorp Vault plugin |
| CVE-2024-43807 | MEDIUM | 5.4 | 0.3% | Aug 16, 2024 | In JetBrains TeamCity before 2024.07.1 multiple stored XSS was possible on Clouds page |
| CVE-2024-43381 | MEDIUM | 5.4 | 0.4% | Aug 16, 2024 | reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are susceptible to Store... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now