2024 CVE Vulnerabilities

39,261 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-36054HIGH7.4Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily read kernel memory ...
CVE-2024-34454HIGH7.4Nintendo Wii U OS 5.5.5 allows man-in-the-middle attackers to forge SSL certificates as though they came from a Root CA,...
CVE-2024-5361HIGH7.2A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. This issue affects som...
CVE-2024-5340HIGH7.2A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been rated as critical. Affected by this issue is some...
CVE-2024-5339HIGH7.2A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been declared as critical. Affected by this vulnerabil...
CVE-2024-5338HIGH7.2A vulnerability was found in Ruijie RG-UAC up to 20240516. It has been classified as critical. Affected is an unknown fu...
CVE-2024-5337HIGH7.2A vulnerability was found in Ruijie RG-UAC up to 20240516 and classified as critical. This issue affects some unknown pr...
CVE-2024-5336HIGH7.2A vulnerability has been found in Ruijie RG-UAC up to 20240516 and classified as critical. This vulnerability affects th...
CVE-2024-35388HIGH8.8TOTOLINK NR1800X v9.1.0u.6681_B20230703 was discovered to contain a stack overflow via the password parameter in the fun...
CVE-2024-33471HIGH7.2An issue in the Sensor Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to SMTP credentials in pl...
CVE-2024-35395HIGH8.8TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sampl...
CVE-2024-35618HIGH7.5PingCAP TiDB v7.5.1 was discovered to contain a NULL pointer dereference via the component SortedRowContainer.
CVE-2024-35340HIGH8.6Tenda FH1206 V1.2.0.8(8155) was discovered to contain a command injection vulnerability via the cmdinput parameter at ip...
CVE-2024-4037HIGH7.3The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and i...
CVE-2024-0867HIGH8.1The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including,...
CVE-2024-5299HIGH8.8D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows ...
CVE-2024-5298HIGH8.8D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerab...
CVE-2024-5297HIGH8.8D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote att...
CVE-2024-5295HIGH8.8D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent...
CVE-2024-5293HIGH8.8D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows ...
CVE-2024-5292HIGH7.8D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability a...
CVE-2024-5291HIGH8.8D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allow...
CVE-2024-5247HIGH8.8NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. Th...
CVE-2024-5246HIGH8.8NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote a...
CVE-2024-5245HIGH7.8NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerabili...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now