2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20887 | HIGH | 7.5 | 0.3% | Jun 4, 2024 | Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary ... |
| CVE-2024-20884 | HIGH | 7.8 | 0.1% | Jun 4, 2024 | Incorrect use of privileged API vulnerability in getSemBatteryUsageStats in BatteryStatsService prior to SMR Jun-2024 Re... |
| CVE-2024-20883 | HIGH | 7.8 | 0.1% | Jun 4, 2024 | Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-20... |
| CVE-2024-20879 | HIGH | 7.1 | 0.1% | Jun 4, 2024 | Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write... |
| CVE-2024-20878 | HIGH | 7.8 | 0.2% | Jun 4, 2024 | Heap out-of-bound write vulnerability in parsing grid image in libsavscmn.so prior to SMR June-2024 Release 1 allows loc... |
| CVE-2024-20877 | HIGH | 7.8 | 0.2% | Jun 4, 2024 | Heap out-of-bound write vulnerability in parsing grid image header in libsavscmn.so prior to SMR Jun-2024 Release 1 allo... |
| CVE-2024-20876 | HIGH | 7.8 | 0.1% | Jun 4, 2024 | Improper input validation in libsheifdecadapter.so prior to SMR Jun-2024 Release 1 allows local attackers to lead to mem... |
| CVE-2024-20874 | HIGH | 7.8 | 0.2% | Jun 4, 2024 | Improper access control vulnerability in SmartManagerCN prior to SMR Jun-2024 Release 1 allows local attackers to launch... |
| CVE-2024-4856 | HIGH | 8.2 | 0.5% | Jun 4, 2024 | The FS Product Inquiry WordPress plugin through 1.1.1 does not sanitise and escape a parameter before outputting it back... |
| CVE-2024-4749 | HIGH | 8.3 | 0.4% | Jun 4, 2024 | The wp-eMember WordPress plugin before 10.3.9 does not sanitize and escape the "fieldId" parameter before outputting it ... |
| CVE-2024-3555 | HIGH | 7.2 | 0.3% | Jun 4, 2024 | The Social Link Pages: link-in-bio landing pages for your social media profiles plugin for WordPress is vulnerable to un... |
| CVE-2024-2019 | HIGH | 7.5 | 0.4% | Jun 4, 2024 | The WP-DB-Table-Editor plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss... |
| CVE-2024-4870 | HIGH | 7.2 | 0.5% | Jun 4, 2024 | The Frontend Registration – Contact Form 7 plugin for WordPress is vulnerable to privilege escalation in versions up to,... |
| CVE-2024-4540 | HIGH | 7.5 | 0.6% | Jun 3, 2024 | A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR). Client-provided parameters were found to ... |
| CVE-2024-32983 | HIGH | 7.5 | 0.4% | Jun 3, 2024 | Misskey is an open source, decentralized microblogging platform. Misskey doesn't perform proper normalization on the JSO... |
| CVE-2024-36128 | HIGH | 7.5 | 0.6% | Jun 3, 2024 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numer... |
| CVE-2024-36127 | HIGH | 7.5 | 0.4% | Jun 3, 2024 | apko is an apk-based OCI image builder. apko exposures HTTP basic auth credentials from repository and keyring URLs in l... |
| CVE-2024-36728 | HIGH | 8.1 | 5.2% | Jun 3, 2024 | TRENDnet TEW-827DRU devices through 2.06B04 contain a stack-based buffer overflow in the ssi binary. The overflow allows... |
| CVE-2024-36569 | HIGH | 8.1 | 0.6% | Jun 3, 2024 | Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via editClientImage.php. |
| CVE-2024-35631 | HIGH | 7.1 | 0.3% | Jun 3, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Foliovision... |
| CVE-2024-35630 | HIGH | 7.6 | 0.4% | Jun 3, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LJ Apps WP TripAdv... |
| CVE-2024-23670 | HIGH | 8.8 | 0.4% | Jun 3, 2024 | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,... |
| CVE-2024-23668 | HIGH | 8.8 | 0.7% | Jun 3, 2024 | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,... |
| CVE-2024-23667 | HIGH | 8.8 | 0.4% | Jun 3, 2024 | An improper authorization in Fortinet FortiWebManager 7.2.0, FortiWebManager 7.0.0 through 7.0.4, FortiWebManager 6.3.0,... |
| CVE-2024-23665 | HIGH | 8.8 | 0.5% | Jun 3, 2024 | Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now