2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-53015 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption while processing IOCTL command to handle buffers associated with a session. |
| CVE-2024-53013 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption may occur while processing voice call registration with user. |
| CVE-2024-53010 | HIGH | 7.8 | 0.1% | Jun 3, 2025 | Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
| CVE-2024-8008 | MEDIUM | 5.2 | 0.5% | Jun 2, 2025 | A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encodin... |
| CVE-2024-7074 | MEDIUM | 6.8 | 9.8% | Jun 2, 2025 | An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP... |
| CVE-2024-7073 | MEDIUM | 6.5 | 0.2% | Jun 2, 2025 | A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in ... |
| CVE-2024-3509 | MEDIUM | 4.3 | 0.2% | Jun 2, 2025 | A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insu... |
| CVE-2024-1440 | MEDIUM | 6.1 | 0.2% | Jun 2, 2025 | An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in... |
| CVE-2024-57459 | HIGH | 7.3 | 0.2% | Jun 2, 2025 | A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds ... |
| CVE-2024-40114 | MEDIUM | 6.1 | 0.2% | Jun 2, 2025 | A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an ... |
| CVE-2024-40113 | MEDIUM | 6.5 | 0.2% | Jun 2, 2025 | Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials. |
| CVE-2024-40112 | MEDIUM | 5.9 | 0.4% | Jun 2, 2025 | A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, wh... |
| CVE-2024-54028 | HIGH | 7.8 | 0.3% | Jun 2, 2025 | An integer underflow vulnerability exists in the OLE Document DIFAT Parser functionality of catdoc 0.95. A specially cra... |
| CVE-2024-52035 | HIGH | 7.8 | 0.3% | Jun 2, 2025 | An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. ... |
| CVE-2024-48877 | HIGH | 7.8 | 0.3% | Jun 2, 2025 | A memory corruption vulnerability exists in the Shared String Table Record Parser implementation in xls2csv utility vers... |
| CVE-2024-57783 | HIGH | 8.1 | 0.2% | Jun 2, 2025 | The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM outpu... |
| CVE-2024-12168 | HIGH | 7.8 | 0.1% | Jun 2, 2025 | Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used. |
| CVE-2024-11857 | HIGH | 8.5 | 0.2% | Jun 2, 2025 | Bluetooth HCI Adaptor from Realtek has a Link Following vulnerability. Local attackers with regular privileges can creat... |
| CVE-2024-42191 | CRITICAL | 9.8 | 0.2% | May 30, 2025 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a COM hijacking vulnerability which could allow an attacker ... |
| CVE-2024-42190 | CRITICAL | 9.8 | 0.2% | May 30, 2025 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker ... |
| CVE-2024-23589 | MEDIUM | 6.8 | 0.1% | May 30, 2025 | Due to outdated Hash algorithm, HCL Glovius Cloud could allow attackers to guess the input data using brute-force or dic... |
| CVE-2024-13917 | HIGH | 8.3 | 0.2% | May 30, 2025 | An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any applicati... |
| CVE-2024-13916 | MEDIUM | 6.9 | 0.2% | May 30, 2025 | An application "com.pri.applock", which is pre-loaded on Kruger&Matz smartphones, allows a user to encrypt any applicati... |
| CVE-2024-13915 | MEDIUM | 6.9 | 0.2% | May 30, 2025 | Android based smartphones from vendors such as Ulefone and Krüger&Matz contain "com.pri.factorytest" application preload... |
| CVE-2024-7097 | MEDIUM | 4.3 | 0.5% | May 30, 2025 | An incorrect authorization vulnerability exists in multiple WSO2 products due to a flaw in the SOAP admin service, which... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now