2024 CVE Vulnerabilities

39,266 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-29651HIGH8.1A Prototype Pollution issue in API Dev Tools json-schema-ref-parser v.11.0.0 and v.11.1.0 allows a remote attacker to ex...
CVE-2024-24293HIGH8.8A Prototype Pollution issue in MiguelCastillo @bit/loader v.10.0.3 allows an attacker to execute arbitrary code via the ...
CVE-2024-34948HIGH7.5An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 allows attackers to ...
CVE-2024-0401HIGH7.2ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and r...
CVE-2024-4151HIGH8.1An Improper Access Control vulnerability exists in lunary-ai/lunary version 1.2.2, where users can view and update any p...
CVE-2024-3482HIGH8.7A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager a...
CVE-2024-34953HIGH7.5An issue in taurusxin ncmdump v1.3.2 allows attackers to cause a Denial of Service (DoS) via memory exhaustion by supply...
CVE-2024-2835HIGH8.7A Stored Cross-Site Scripting (XSS) vulnerability has been identified in OpenText ArcSight Enterprise Security Manager a...
CVE-2024-4287HIGH7.2In mintplex-labs/anything-llm, a vulnerability exists due to improper input validation in the workspace update process. ...
CVE-2024-27312HIGH8.1Zohocorp ManageEngine PAM360 version 6601 is vulnerable to authorization vulnerability which allows a low-privileged use...
CVE-2024-36001HIGH7.8In the Linux kernel, the following vulnerability has been resolved: netfs: Fix the pre-flush when appending to a file i...
CVE-2024-35999HIGH7.5In the Linux kernel, the following vulnerability has been resolved: smb3: missing lock when picking channel Coverity s...
CVE-2024-35986HIGH7In the Linux kernel, the following vulnerability has been resolved: phy: ti: tusb1210: Resolve charger-det crash if cha...
CVE-2024-35979HIGH7.8In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1...
CVE-2024-35976HIGH7.1In the Linux kernel, the following vulnerability has been resolved: xsk: validate user input for XDP_{UMEM|COMPLETION}_...
CVE-2024-35969HIGH8.8In the Linux kernel, the following vulnerability has been resolved: ipv6: fix race condition between ipv6_get_ifaddr an...
CVE-2024-35967HIGH7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix not validating setsockopt user ...
CVE-2024-35966HIGH7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix not validating setsockopt us...
CVE-2024-35965HIGH7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix not validating setsockopt use...
CVE-2024-35964HIGH7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix not validating setsockopt user ...
CVE-2024-35963HIGH7.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Fix not validating setsockopt ...
CVE-2024-35955HIGH8.8In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix possible use-after-free issue on kprob...
CVE-2024-35949HIGH7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadat...
CVE-2024-35948HIGH7.8In the Linux kernel, the following vulnerability has been resolved: bcachefs: Check for journal entries overruning end ...
CVE-2024-3761HIGH7.5In lunary-ai/lunary version 1.2.2, the DELETE endpoint located at `packages/backend/src/api/v1/datasets` is vulnerable t...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now