2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7005 | MEDIUM | 4.3 | 0.4% | Aug 6, 2024 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote att... |
| CVE-2024-7004 | MEDIUM | 4.3 | 0.4% | Aug 6, 2024 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote att... |
| CVE-2024-7003 | MEDIUM | 4.3 | 0.4% | Aug 6, 2024 | Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a ... |
| CVE-2024-7001 | MEDIUM | 4.3 | 0.4% | Aug 6, 2024 | Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a u... |
| CVE-2024-6999 | MEDIUM | 4.3 | 0.4% | Aug 6, 2024 | Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a ... |
| CVE-2024-6995 | MEDIUM | 4.7 | 0.5% | Aug 6, 2024 | Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker ... |
| CVE-2024-43113 | MEDIUM | 6.1 | 0.3% | Aug 6, 2024 | The contextual menu for links could provide an opportunity for cross-site scripting attacks This vulnerability affects F... |
| CVE-2024-43112 | MEDIUM | 6.1 | 0.3% | Aug 6, 2024 | Long pressing on a download link could potentially provide a means for cross-site scripting This vulnerability affects F... |
| CVE-2024-43111 | MEDIUM | 6.1 | 0.3% | Aug 6, 2024 | Long pressing on a download link could potentially allow Javascript commands to be executed within the browser This vuln... |
| CVE-2024-41333 | MEDIUM | 6.1 | 0.5% | Aug 6, 2024 | A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to ex... |
| CVE-2024-39751 | MEDIUM | 4.3 | 0.4% | Aug 6, 2024 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed tec... |
| CVE-2024-23464 | MEDIUM | 4.9 | 0.4% | Aug 6, 2024 | In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Z... |
| CVE-2024-36424 | MEDIUM | 5.5 | 1.0% | Aug 6, 2024 | K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial of service (BSOD) because of ... |
| CVE-2024-41911 | MEDIUM | 5.4 | 0.2% | Aug 6, 2024 | A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The flaw does not... |
| CVE-2024-41910 | MEDIUM | 6.1 | 0.3% | Aug 6, 2024 | A vulnerability was discovered in the firmware builds up to 10.10.2.2 in Poly Clariti Manager devices. The firmware con... |
| CVE-2024-40101 | MEDIUM | 6.1 | 0.9% | Aug 6, 2024 | A Reflected Cross-site scripting (XSS) vulnerability exists in '/search' in microweber 2.0.15 and earlier allowing unaut... |
| CVE-2024-7551 | MEDIUM | 4.9 | 0.9% | Aug 6, 2024 | A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as problematic. Affected is an unknown func... |
| CVE-2024-7531 | MEDIUM | 6.5 | 0.4% | Aug 6, 2024 | Calling `PK11_Encrypt()` in NSS using CKM_CHACHA20 and the same buffer for input and output can result in plaintext on a... |
| CVE-2024-7529 | MEDIUM | 6.5 | 0.5% | Aug 6, 2024 | The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into gr... |
| CVE-2024-7526 | MEDIUM | 6.5 | 0.5% | Aug 6, 2024 | ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak s... |
| CVE-2024-7524 | MEDIUM | 6.1 | 0.5% | Aug 6, 2024 | Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a si... |
| CVE-2024-7518 | MEDIUM | 6.5 | 0.5% | Aug 6, 2024 | Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spo... |
| CVE-2024-33994 | MEDIUM | 6.1 | 0.2% | Aug 6, 2024 | Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could crea... |
| CVE-2024-33993 | MEDIUM | 6.1 | 0.2% | Aug 6, 2024 | Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could crea... |
| CVE-2024-33992 | MEDIUM | 6.1 | 0.2% | Aug 6, 2024 | Cross-Site Scripting (XSS) vulnerability in School Event Management System affecting version 1.0. An attacker could expl... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now