2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22095 | HIGH | 7.2 | 0.2% | May 16, 2024 | Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel(R) Server D50DNP Family prod... |
| CVE-2024-21864 | HIGH | 7.8 | 0.3% | May 16, 2024 | Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow a... |
| CVE-2024-21862 | HIGH | 7.3 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allo... |
| CVE-2024-21861 | HIGH | 7.8 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user t... |
| CVE-2024-21837 | HIGH | 7.3 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an... |
| CVE-2024-21835 | HIGH | 7.8 | 0.2% | May 16, 2024 | Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to... |
| CVE-2024-21831 | HIGH | 7.8 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authen... |
| CVE-2024-21823 | HIGH | 7.5 | 0.2% | May 16, 2024 | Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generation... |
| CVE-2024-21814 | HIGH | 7.3 | 0.2% | May 16, 2024 | Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authentic... |
| CVE-2024-21813 | HIGH | 7.9 | 0.2% | May 16, 2024 | Exposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an authenticated user to potenti... |
| CVE-2024-21809 | HIGH | 7.3 | 0.2% | May 16, 2024 | Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow ... |
| CVE-2024-21788 | HIGH | 7.8 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentia... |
| CVE-2024-21777 | HIGH | 7.3 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an ... |
| CVE-2024-21772 | HIGH | 7.8 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pote... |
| CVE-2024-4733 | HIGH | 7.5 | 0.6% | May 16, 2024 | The ShiftController Employee Shift Scheduling plugin is vulnerable to PHP Object Injection via deserialization of untrus... |
| CVE-2024-3286 | HIGH | 7.5 | 0.5% | May 16, 2024 | A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trig... |
| CVE-2024-1417 | HIGH | 7.8 | 0.7% | May 16, 2024 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoin... |
| CVE-2024-27260 | HIGH | 8.4 | 0.2% | May 16, 2024 | IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invsc... |
| CVE-2024-4956 | HIGH | 7.5 | 18.2% | May 16, 2024 | Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version ... |
| CVE-2024-3640 | HIGH | 7 | 0.3% | May 16, 2024 | An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote c... |
| CVE-2024-34905 | HIGH | 7.5 | 0.6% | May 16, 2024 | FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerabil... |
| CVE-2024-31142 | HIGH | 7.5 | 17.4% | May 16, 2024 | Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intende... |
| CVE-2024-20389 | HIGH | 7.8 | 0.2% | May 16, 2024 | A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated... |
| CVE-2024-20326 | HIGH | 7.8 | 0.3% | May 16, 2024 | A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated... |
| CVE-2024-30314 | HIGH | 7.8 | 0.9% | May 16, 2024 | Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now