2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-39290 | MEDIUM | 6.5 | 0.4% | Nov 22, 2024 | Insufficiently protected credentials issue exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent unauthenticate... |
| CVE-2024-31408 | HIGH | 8 | 1.1% | Nov 22, 2024 | OS command injection vulnerability exists in AIPHONE IX SYSTEM and IXG SYSTEM. A network-adjacent authenticated attacker... |
| CVE-2024-52056 | MEDIUM | 6.5 | 0.7% | Nov 21, 2024 | Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to delete any... |
| CVE-2024-52055 | MEDIUM | 4.9 | 1.0% | Nov 21, 2024 | Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to read any f... |
| CVE-2024-52054 | LOW | 2.7 | 0.7% | Nov 21, 2024 | Path Traversal in the Manager component of Wowza Streaming Engine below 4.9.1 allows an administrator user to create an ... |
| CVE-2024-52053 | CRITICAL | 9.6 | 0.6% | Nov 21, 2024 | Stored Cross-Site Scripting in the Manager component of Wowza Streaming Engine below 4.9.1 allows an unauthenticated att... |
| CVE-2024-52052 | HIGH | 7.2 | 0.5% | Nov 21, 2024 | Wowza Streaming Engine below 4.9.1 permits an authenticated Streaming Engine Manager administrator to define a custom ap... |
| CVE-2024-52616 | MEDIUM | 5.3 | 0.7% | Nov 21, 2024 | A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementi... |
| CVE-2024-52615 | MEDIUM | 5.3 | 0.6% | Nov 21, 2024 | A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies at... |
| CVE-2024-51367 | CRITICAL | 9.8 | 0.8% | Nov 21, 2024 | An arbitrary file upload vulnerability in the component \Users\username.BlackBoard of BlackBoard v2.0.0.2 allows attacke... |
| CVE-2024-51366 | CRITICAL | 9.8 | 0.8% | Nov 21, 2024 | An arbitrary file upload vulnerability in the component \Roaming\Omega of OmegaT v6.0.1 allows attackers to execute arbi... |
| CVE-2024-51365 | — | — | — | Nov 21, 2024 | Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further inv... |
| CVE-2024-51364 | HIGH | 8.8 | 0.7% | Nov 21, 2024 | An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a... |
| CVE-2024-49588 | MEDIUM | 6.8 | 0.3% | Nov 21, 2024 | Multiple endpoints in `oracle-sidecar` in versions 0.347.0 to 0.543.0 were found to be vulnerable to SQL injections. |
| CVE-2024-53095 | CRITICAL | 9.8 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespac... |
| CVE-2024-53094 | MEDIUM | 5.5 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Add sendpage_ok() check to disable MSG_SP... |
| CVE-2024-53093 | MEDIUM | 5.5 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: defer partition scanning We need t... |
| CVE-2024-53092 | MEDIUM | 5.5 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: virtio_pci: Fix admin vq cleanup by using correct i... |
| CVE-2024-53091 | MEDIUM | 5.5 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has... |
| CVE-2024-53090 | MEDIUM | 5.5 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: afs: Fix lock recursion afs_wake_up_async_call() c... |
| CVE-2024-53089 | MEDIUM | 5.5 | 0.2% | Nov 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Mark hrtimer to expire in hard inte... |
| CVE-2024-51337 | LOW | 3.5 | 0.6% | Nov 21, 2024 | Cross Site Scripting vulnerability in Gibbon before v.27.0.01 and fixed in v.28.0.00 allows a remote attacker to obtain ... |
| CVE-2024-53432 | HIGH | 7.5 | 0.7% | Nov 21, 2024 | While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in ... |
| CVE-2024-53335 | HIGH | 7.8 | 0.3% | Nov 21, 2024 | TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in downloadFlile.cgi. |
| CVE-2024-53334 | HIGH | 8.8 | 0.7% | Nov 21, 2024 | TOTOLINK A810R V4.1.2cu.5182_B20201026 is vulnerable to Buffer Overflow in infostat.cgi. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now