2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34624 | MEDIUM | 5.5 | 0.2% | Aug 7, 2024 | Out-of-bounds read in applying paragraphs in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentia... |
| CVE-2024-34621 | MEDIUM | 5.5 | 0.2% | Aug 7, 2024 | Out-of-bounds read in applying binary with data in Samsung Notes prior to version 4.4.21.62 allows local attackers to po... |
| CVE-2024-34616 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers... |
| CVE-2024-34613 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive infor... |
| CVE-2024-34611 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive informati... |
| CVE-2024-34610 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access prot... |
| CVE-2024-34609 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in VoiceNoteService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restriction... |
| CVE-2024-34608 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in PaymentManagerService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restri... |
| CVE-2024-34607 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in SamsungNotesService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrict... |
| CVE-2024-34606 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in SmartThingsService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restricti... |
| CVE-2024-34605 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in SamsungHealthService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restric... |
| CVE-2024-34604 | MEDIUM | 5.5 | 0.1% | Aug 7, 2024 | Improper access control in LedCoverService prior to SMR Aug-2024 Release 1 allows local attackers to bypass restrictions... |
| CVE-2024-38206 | MEDIUM | 6.5 | 12.3% | Aug 6, 2024 | An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak s... |
| CVE-2024-38166 | MEDIUM | 6.1 | 0.7% | Aug 6, 2024 | An unauthenticated attacker can exploit improper neutralization of input during web page generation in Microsoft Dynamic... |
| CVE-2024-42218 | MEDIUM | 4.7 | 0.2% | Aug 6, 2024 | 1Password 8 before 8.10.38 for macOS allows local attackers to exfiltrate vault items by bypassing macOS-specific securi... |
| CVE-2024-42400 | MEDIUM | 5.3 | 0.4% | Aug 6, 2024 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI proto... |
| CVE-2024-42399 | MEDIUM | 5.3 | 0.4% | Aug 6, 2024 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI proto... |
| CVE-2024-42398 | MEDIUM | 5.3 | 0.4% | Aug 6, 2024 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Soft AP daemon accessed via the PAPI proto... |
| CVE-2024-42397 | MEDIUM | 5.3 | 0.3% | Aug 6, 2024 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed ... |
| CVE-2024-42396 | MEDIUM | 5.3 | 0.3% | Aug 6, 2024 | Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Certificate Management daemon accessed ... |
| CVE-2024-42347 | MEDIUM | 6.5 | 0.4% | Aug 6, 2024 | matrix-react-sdk is a react-based SDK for inserting a Matrix chat/voip client into a web page. A malicious homeserver c... |
| CVE-2024-41677 | MEDIUM | 6.1 | 0.5% | Aug 6, 2024 | Qwik is a performance focused javascript framework. A potential mutation XSS vulnerability exists in Qwik for versions u... |
| CVE-2024-42358 | MEDIUM | 5.5 | 0.3% | Aug 6, 2024 | PDFio is a simple C library for reading and writing PDF files. There is a denial of service (DOS) vulnerability in the T... |
| CVE-2024-39229 | MEDIUM | 5.3 | 0.2% | Aug 6, 2024 | An issue in GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT... |
| CVE-2024-7564 | MEDIUM | 6.5 | 1.2% | Aug 6, 2024 | Logsign Unified SecOps Platform Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remo... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now