2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-36376 | HIGH | 8.1 | 0.3% | May 29, 2024 | In JetBrains TeamCity before 2024.03.2 users could perform actions that should not be available to them based on their p... |
| CVE-2024-36365 | HIGH | 8.1 | 0.3% | May 29, 2024 | In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate... |
| CVE-2024-5185 | HIGH | 8.3 | 0.2% | May 29, 2024 | The EmbedAI application is susceptible to security issues that enable Data Poisoning attacks. This weakness could result... |
| CVE-2024-25977 | HIGH | 7.3 | 0.6% | May 29, 2024 | The application does not change the session token when using the login or logout functionality. An attacker can set a se... |
| CVE-2024-28826 | HIGH | 8.1 | 0.5% | May 29, 2024 | Improper restriction of local upload and download paths in check_sftp in Checkmk before 2.3.0p4, 2.2.0p27, 2.1.0p44, and... |
| CVE-2024-36015 | HIGH | 7.8 | 0.3% | May 29, 2024 | In the Linux kernel, the following vulnerability has been resolved: ppdev: Add an error check in register_device In re... |
| CVE-2024-4611 | HIGH | 8.1 | 0.5% | May 29, 2024 | The AppPresser plugin for WordPress is vulnerable to improper missing encryption exception handling on the 'decrypt_valu... |
| CVE-2024-21512 | HIGH | 8.2 | 3.1% | May 29, 2024 | Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitizatio... |
| CVE-2024-5204 | HIGH | 8.8 | 0.6% | May 29, 2024 | The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1... |
| CVE-2024-35226 | HIGH | 7.3 | 0.5% | May 28, 2024 | Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. In a... |
| CVE-2024-22641 | HIGH | 7.5 | 1.1% | May 28, 2024 | TCPDF version 6.6.5 and before is vulnerable to ReDoS (Regular Expression Denial of Service) if parsing an untrusted SVG... |
| CVE-2024-28060 | HIGH | 7.3 | 0.2% | May 28, 2024 | An issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arb... |
| CVE-2024-36110 | HIGH | 8.2 | 0.4% | May 28, 2024 | ansibleguy-webui is an open source WebUI for using Ansible. Multiple forms in versions < 0.0.21 allowed injection of HTM... |
| CVE-2024-36109 | HIGH | 7.6 | 0.4% | May 28, 2024 | CoCalc is web-based software that enables collaboration in research, teaching, and scientific publishing. In affected ve... |
| CVE-2024-33450 | HIGH | 7.5 | 0.5% | May 28, 2024 | SQL Injection in Finereport v.8.0 allows a remote attacker to obtain sensitive information |
| CVE-2024-24919 | HIGH | 8.6 | 100.0% | May 28, 2024 | Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the inte... |
| CVE-2024-33402 | HIGH | 8.1 | 0.4% | May 28, 2024 | A SQL injection vulnerability in /model/approve_petty_cash.php in campcodes Complete Web-Based School Management System ... |
| CVE-2024-35341 | HIGH | 7.5 | 0.4% | May 28, 2024 | Certain Anpviz products allow unauthenticated users to download the running configuration of the device via a HTTP GET r... |
| CVE-2024-30165 | HIGH | 7.1 | 0.2% | May 28, 2024 | Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute ... |
| CVE-2024-26024 | HIGH | 8.6 | 0.2% | May 28, 2024 | SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in Substation Server. |
| CVE-2024-30212 | HIGH | 7 | 0.6% | May 28, 2024 | If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 ... |
| CVE-2024-24959 | HIGH | 8.2 | 0.5% | May 28, 2024 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of... |
| CVE-2024-24958 | HIGH | 8.2 | 0.5% | May 28, 2024 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of... |
| CVE-2024-24957 | HIGH | 8.2 | 0.5% | May 28, 2024 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of... |
| CVE-2024-24956 | HIGH | 8.2 | 0.5% | May 28, 2024 | Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now