2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-3594 | HIGH | 8.7 | 0.5% | May 23, 2024 | The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high pr... |
| CVE-2024-4662 | HIGH | 8.8 | 0.9% | May 23, 2024 | The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8... |
| CVE-2024-4978 | HIGH | 8.4 | 26.9% | May 23, 2024 | Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected... |
| CVE-2024-29853 | HIGH | 7.8 | 0.2% | May 22, 2024 | An authentication bypass vulnerability in Veeam Agent for Microsoft Windows allows for local privilege escalation. |
| CVE-2024-29851 | HIGH | 7.2 | 0.9% | May 22, 2024 | Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account. |
| CVE-2024-29850 | HIGH | 8.8 | 0.8% | May 22, 2024 | Veeam Backup Enterprise Manager allows account takeover via NTLM relay. |
| CVE-2024-4454 | HIGH | 7.8 | 0.4% | May 22, 2024 | WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allo... |
| CVE-2024-4453 | HIGH | 7.8 | 1.6% | May 22, 2024 | GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote a... |
| CVE-2024-27264 | HIGH | 7.8 | 0.1% | May 22, 2024 | IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqual... |
| CVE-2024-21791 | HIGH | 7.2 | 2.2% | May 22, 2024 | Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection in lockout history option. Note: Non-admin user... |
| CVE-2024-20360 | HIGH | 8.8 | 0.8% | May 22, 2024 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an... |
| CVE-2024-4563 | HIGH | 7.5 | 0.2% | May 22, 2024 | The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insuffic... |
| CVE-2024-36077 | HIGH | 8.8 | 0.6% | May 22, 2024 | Qlik Sense Enterprise for Windows before 14.187.4 allows a remote attacker to elevate their privilege due to improper va... |
| CVE-2024-5160 | HIGH | 8.8 | 0.6% | May 22, 2024 | Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of boun... |
| CVE-2024-5159 | HIGH | 8.8 | 0.6% | May 22, 2024 | Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bou... |
| CVE-2024-5158 | HIGH | 8.1 | 0.6% | May 22, 2024 | Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary ... |
| CVE-2024-5157 | HIGH | 8.8 | 0.8% | May 22, 2024 | Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code... |
| CVE-2024-34448 | HIGH | 8.8 | 0.7% | May 22, 2024 | Ghost before 5.82.0 allows CSV Injection during a member CSV export. |
| CVE-2024-33228 | HIGH | 8.4 | 0.3% | May 22, 2024 | An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to ... |
| CVE-2024-33227 | HIGH | 8.8 | 0.5% | May 22, 2024 | An issue in the component ddcdrv.sys of Nicomsoft WinI2C/DDC v3.7.4.0 allows attackers to escalate privileges and execut... |
| CVE-2024-33225 | HIGH | 7.8 | 0.2% | May 22, 2024 | An issue in the component RTKVHD64.sys of Realtek Semiconductor Corp Realtek(r) High Definition Audio Function Driver v6... |
| CVE-2024-33224 | HIGH | 8.4 | 0.2% | May 22, 2024 | An issue in the component rtkio64.sys of Realtek Semiconductor Corp Realtek lO Driver v1.008.0823.2017 allows attackers ... |
| CVE-2024-33223 | HIGH | 8.8 | 0.5% | May 22, 2024 | An issue in the component IOMap64.sys of ASUSTeK Computer Inc ASUS GPU TweakII v1.4.5.2 allows attackers to escalate pri... |
| CVE-2024-33222 | HIGH | 8.4 | 0.2% | May 22, 2024 | An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate ... |
| CVE-2024-33221 | HIGH | 7.8 | 0.2% | May 22, 2024 | An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to esc... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now