2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-35057 | HIGH | 7.5 | 0.4% | May 21, 2024 | An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet. |
| CVE-2024-31757 | HIGH | 7.8 | 0.1% | May 21, 2024 | An issue in TeraByte Unlimited Image for Windows v.3.64.0.0 and before and fixed in v.4.0.0.0 allows a local attacker to... |
| CVE-2024-22274 | HIGH | 7.2 | 2.5% | May 21, 2024 | The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative ... |
| CVE-2024-22273 | HIGH | 7.8 | 0.2% | May 21, 2024 | The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious... |
| CVE-2024-36052 | HIGH | 7.5 | 0.7% | May 21, 2024 | RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a differen... |
| CVE-2024-27130 | HIGH | 8.8 | 38.1% | May 21, 2024 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2024-27129 | HIGH | 8.8 | 0.7% | May 21, 2024 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2024-27128 | HIGH | 8.8 | 0.7% | May 21, 2024 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system ver... |
| CVE-2024-27127 | HIGH | 8.8 | 0.7% | May 21, 2024 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulner... |
| CVE-2024-21902 | HIGH | 8.1 | 0.4% | May 21, 2024 | An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operatin... |
| CVE-2024-33529 | HIGH | 7.2 | 0.9% | May 21, 2024 | ILIAS 7 before 7.30 and ILIAS 8 before 8.11 as well as ILIAS 9.0 allow remote authenticated attackers with administrativ... |
| CVE-2024-33526 | HIGH | 7.1 | 0.5% | May 21, 2024 | A Stored Cross-site Scripting (XSS) vulnerability in the "Import of user role and title of user role" feature in ILIAS 7... |
| CVE-2024-35386 | HIGH | 7.5 | 0.6% | May 21, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the m... |
| CVE-2024-4420 | HIGH | 7.5 | 0.2% | May 21, 2024 | There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3. * An adversary can crash binari... |
| CVE-2024-4988 | HIGH | 7.5 | 0.4% | May 21, 2024 | The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to th... |
| CVE-2024-4435 | HIGH | 7.5 | 0.5% | May 21, 2024 | When storing unbounded types in a BTreeMap, a node is represented as a linked list of "memory chunks". It was discovered... |
| CVE-2024-4566 | HIGH | 7.1 | 0.4% | May 21, 2024 | The ShopLentor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check... |
| CVE-2024-4290 | HIGH | 7.1 | 0.4% | May 21, 2024 | The Sailthru Triggermail WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could all... |
| CVE-2024-5145 | HIGH | 8.8 | 0.7% | May 20, 2024 | A vulnerability was found in SourceCodester Vehicle Management System up to 1.0 and classified as critical. This issue a... |
| CVE-2024-34710 | HIGH | 7.1 | 0.4% | May 20, 2024 | Wiki.js is al wiki app built on Node.js. Client side template injection was discovered, that could allow an attacker to ... |
| CVE-2024-35579 | HIGH | 7.7 | 0.4% | May 20, 2024 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv. |
| CVE-2024-35578 | HIGH | 8 | 0.4% | May 20, 2024 | Tenda AX1806 v1.0.0.1 contains a stack overflow via the adv.iptv.stballvlans parameter in the function formSetIptv. |
| CVE-2024-34949 | HIGH | 8.2 | 0.4% | May 20, 2024 | SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function Orde... |
| CVE-2024-34193 | HIGH | 7.5 | 0.6% | May 20, 2024 | smanga 3.2.7 does not filter the file parameter at the PHP/get file flow.php interface, resulting in a path traversal vu... |
| CVE-2024-31714 | HIGH | 7.5 | 0.4% | May 20, 2024 | Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an attacker to cause a denial of service via the L... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now