2024 CVE Vulnerabilities
39,261 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5243 | HIGH | 7.5 | 0.8% | May 23, 2024 | TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent atta... |
| CVE-2024-5242 | HIGH | 7.5 | 0.8% | May 23, 2024 | TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-a... |
| CVE-2024-5228 | HIGH | 7.5 | 0.5% | May 23, 2024 | TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This ... |
| CVE-2024-5227 | HIGH | 7.5 | 0.7% | May 23, 2024 | TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows n... |
| CVE-2024-5202 | HIGH | 7.7 | 0.4% | May 23, 2024 | Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservi... |
| CVE-2024-5201 | HIGH | 8.8 | 0.4% | May 23, 2024 | Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege... |
| CVE-2024-35090 | HIGH | 8.2 | 0.3% | May 23, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysUreportFileMappe... |
| CVE-2024-35083 | HIGH | 8.8 | 0.4% | May 23, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.... |
| CVE-2024-35081 | HIGH | 7.5 | 0.5% | May 23, 2024 | LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary file deletion vulnerability via the fileName parameter in th... |
| CVE-2024-34936 | HIGH | 8.6 | 0.4% | May 23, 2024 | A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an... |
| CVE-2024-34928 | HIGH | 7.3 | 0.3% | May 23, 2024 | A SQL injection vulnerability in /model/update_subject_routing.php in Campcodes Complete Web-Based School Management Sys... |
| CVE-2024-2301 | HIGH | 7.6 | 0.3% | May 23, 2024 | Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management... |
| CVE-2024-4471 | HIGH | 8 | 0.6% | May 23, 2024 | The 140+ Widgets | Best Addons For Elementor – FREE for WordPress is vulnerable to PHP Object Injection in versions up t... |
| CVE-2024-34060 | HIGH | 8.8 | 1.0% | May 23, 2024 | IrisEVTXModule is an interface module for Evtx2Splunk and Iris in order to ingest Microsoft EVTX log files. The `iris-ev... |
| CVE-2024-26139 | HIGH | 8.1 | 0.4% | May 23, 2024 | OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observ... |
| CVE-2024-4779 | HIGH | 8.8 | 0.5% | May 23, 2024 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to SQL Injecti... |
| CVE-2024-35186 | HIGH | 8.8 | 0.8% | May 23, 2024 | gitoxide is a pure Rust implementation of Git. During checkout, `gix-worktree-state` does not verify that paths point to... |
| CVE-2024-30280 | HIGH | 7.8 | 6.6% | May 23, 2024 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds read vulnerability when ... |
| CVE-2024-30279 | HIGH | 7.8 | 5.9% | May 23, 2024 | Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an out-of-bounds write vulnerability that... |
| CVE-2024-4835 | HIGH | 8.2 | 0.8% | May 23, 2024 | A XSS condition exists within GitLab in versions 15.11 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1. By ... |
| CVE-2024-36013 | HIGH | 8.8 | 0.5% | May 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_... |
| CVE-2024-36012 | HIGH | 7.8 | 0.2% | May 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: msft: fix slab-use-after-free in msft_do... |
| CVE-2024-2038 | HIGH | 7.5 | 0.5% | May 23, 2024 | The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthori... |
| CVE-2024-4388 | HIGH | 7.5 | 0.7% | May 23, 2024 | This does not validate a path generated with user input when downloading files, allowing unauthenticated user to downlo... |
| CVE-2024-4347 | HIGH | 7.2 | 0.9% | May 23, 2024 | The WP Fastest Cache plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now