2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33220 | HIGH | 8.8 | 0.7% | May 22, 2024 | An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate pr... |
| CVE-2024-33219 | HIGH | 7.8 | 0.3% | May 22, 2024 | An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to esc... |
| CVE-2024-33218 | HIGH | 7.8 | 0.2% | May 22, 2024 | An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attack... |
| CVE-2024-35559 | HIGH | 8.8 | 0.3% | May 22, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mu... |
| CVE-2024-35558 | HIGH | 8.8 | 0.3% | May 22, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/ca_deal.php?mudi=rev... |
| CVE-2024-35556 | HIGH | 8.8 | 0.3% | May 22, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/vpsSys_deal.php?mudi... |
| CVE-2024-35553 | HIGH | 8.3 | 0.2% | May 22, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mu... |
| CVE-2024-35552 | HIGH | 8.8 | 0.3% | May 22, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoMove_deal.php?mu... |
| CVE-2024-5196 | HIGH | 7.2 | 4.2% | May 22, 2024 | A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /... |
| CVE-2024-5195 | HIGH | 7.2 | 4.2% | May 22, 2024 | A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown ... |
| CVE-2024-5194 | HIGH | 7.2 | 3.6% | May 22, 2024 | A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an... |
| CVE-2024-4157 | HIGH | 8.8 | 0.7% | May 22, 2024 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner... |
| CVE-2024-32988 | HIGH | 7.5 | 0.4% | May 22, 2024 | 'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded... |
| CVE-2024-4443 | HIGH | 7.5 | 10.3% | May 22, 2024 | The Business Directory Plugin – Easy Listing Directories for WordPress plugin for WordPress is vulnerable to time-based ... |
| CVE-2024-0453 | HIGH | 7.7 | 0.4% | May 22, 2024 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check... |
| CVE-2024-0452 | HIGH | 7.7 | 0.4% | May 22, 2024 | The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check... |
| CVE-2024-21683 | HIGH | 8.8 | 88.3% | May 21, 2024 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and... |
| CVE-2024-5040 | HIGH | 8.5 | 0.4% | May 21, 2024 | There are multiple ways in LCDS LAquis SCADA for an attacker to access locations outside of their own directory. |
| CVE-2024-35220 | HIGH | 7.4 | 0.4% | May 21, 2024 | @fastify/session is a session plugin for fastify. Requires the @fastify/cookie plugin. When restoring the cookie from th... |
| CVE-2024-31756 | HIGH | 7.8 | 0.1% | May 21, 2024 | An issue in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and before and fixed in v.5.0.4.0 allows a local attac... |
| CVE-2024-35061 | HIGH | 7.3 | 0.5% | May 21, 2024 | NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to... |
| CVE-2024-35060 | HIGH | 7.5 | 0.5% | May 21, 2024 | An issue in the YAML Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands via supplying... |
| CVE-2024-35059 | HIGH | 7.5 | 0.4% | May 21, 2024 | An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands. |
| CVE-2024-25724 | HIGH | 7.3 | 0.2% | May 21, 2024 | In RTI Connext Professional 5.3.1 through 6.1.0 before 6.1.1, a buffer overflow in XML parsing from Routing Service, Rec... |
| CVE-2024-35058 | HIGH | 7.5 | 0.4% | May 21, 2024 | An issue in the API wait function of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via supplying a cra... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now