2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-29830 | HIGH | 8 | 8.5% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attac... |
| CVE-2024-29829 | HIGH | 8 | 8.2% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attac... |
| CVE-2024-29828 | HIGH | 8 | 8.5% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attac... |
| CVE-2024-29827 | HIGH | 8.8 | 71.7% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att... |
| CVE-2024-29826 | HIGH | 8.8 | 99.9% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att... |
| CVE-2024-29825 | HIGH | 8.8 | 99.9% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att... |
| CVE-2024-29824 | HIGH | 8.8 | 100.0% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att... |
| CVE-2024-29823 | HIGH | 8.8 | 99.9% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att... |
| CVE-2024-29822 | HIGH | 8.8 | 64.4% | May 31, 2024 | An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated att... |
| CVE-2024-22059 | HIGH | 8.8 | 1.1% | May 31, 2024 | A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to read/mod... |
| CVE-2024-22058 | HIGH | 7.8 | 0.4% | May 31, 2024 | A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary... |
| CVE-2024-36120 | HIGH | 7.8 | 0.3% | May 31, 2024 | javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targetin... |
| CVE-2024-35142 | HIGH | 7.8 | 0.2% | May 31, 2024 | IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to exe... |
| CVE-2024-35140 | HIGH | 7.8 | 0.1% | May 31, 2024 | IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to imp... |
| CVE-2024-28736 | HIGH | 7.1 | 2.5% | May 31, 2024 | An issue in Debezium Community debezium-ui v.2.5 allows a local attacker to execute arbitrary code via the refresh page ... |
| CVE-2024-5565 | HIGH | 8.1 | 15.0% | May 31, 2024 | The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt... |
| CVE-2024-5525 | HIGH | 8.8 | 0.4% | May 31, 2024 | Improper privilege management vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability allows a loca... |
| CVE-2024-5523 | HIGH | 8.8 | 0.4% | May 31, 2024 | SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated ... |
| CVE-2024-4469 | HIGH | 7.5 | 0.6% | May 31, 2024 | The WP STAGING WordPress Backup Plugin WordPress plugin before 3.5.0 does not prevent users with the administrator role... |
| CVE-2024-2793 | HIGH | 7.2 | 0.5% | May 31, 2024 | The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2024-37032 | HIGH | 8.8 | 89.6% | May 31, 2024 | Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path,... |
| CVE-2024-5345 | HIGH | 8.8 | 0.7% | May 31, 2024 | The Responsive Owl Carousel for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up ... |
| CVE-2024-37017 | HIGH | 8.1 | 0.5% | May 31, 2024 | asdcplib (aka AS-DCP Lib) 2.13.1 has a heap-based buffer over-read in ASDCP::TimedText::MXFReader::h__Reader::MD_to_Time... |
| CVE-2024-5499 | HIGH | 8.8 | 0.9% | May 30, 2024 | Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitra... |
| CVE-2024-5498 | HIGH | 8.8 | 0.6% | May 30, 2024 | Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exp... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now