2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30274 | HIGH | 7.8 | 0.3% | May 16, 2024 | Substance3D - Painter versions 9.1.2 and earlier are affected by an out-of-bounds write vulnerability that could result ... |
| CVE-2024-20792 | HIGH | 7.8 | 0.4% | May 16, 2024 | Illustrator versions 28.4, 27.9.3 and earlier are affected by a Use After Free vulnerability that could result in arbitr... |
| CVE-2024-20791 | HIGH | 7.8 | 0.3% | May 16, 2024 | Illustrator versions 28.4, 27.9.3 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted... |
| CVE-2024-4844 | HIGH | 7.5 | 0.2% | May 16, 2024 | Hardcoded credentials vulnerability in Trellix ePolicy Orchestrator (ePO) on Premise prior to 5.10 Service Pack 1 Update... |
| CVE-2024-4946 | HIGH | 8.8 | 0.7% | May 16, 2024 | A vulnerability was found in SourceCodester Online Art Gallery Management System 1.0. It has been declared as critical. ... |
| CVE-2024-3643 | HIGH | 8.8 | 0.4% | May 16, 2024 | The Newsletter Popup WordPress plugin through 1.2 does not have CSRF check when deleting list, which could allow attacke... |
| CVE-2024-4930 | HIGH | 8.8 | 0.5% | May 16, 2024 | A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability ... |
| CVE-2024-3750 | HIGH | 8.8 | 0.6% | May 16, 2024 | The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to unauthorized modification ... |
| CVE-2024-4923 | HIGH | 8.8 | 0.7% | May 16, 2024 | A vulnerability has been found in Codezips E-Commerce Site 1.0 and classified as critical. This vulnerability affects un... |
| CVE-2024-27244 | HIGH | 7.8 | 0.1% | May 15, 2024 | Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an aut... |
| CVE-2024-33615 | HIGH | 8.8 | 0.7% | May 15, 2024 | A specially crafted Zip file containing path traversal characters can be imported to the CyberPower PowerPanel serve... |
| CVE-2024-32042 | HIGH | 7.5 | 0.4% | May 15, 2024 | The key used to encrypt passwords stored in the database can be found in the CyberPower PowerPanel application code, ... |
| CVE-2024-31856 | HIGH | 8.8 | 0.5% | May 15, 2024 | An attacker with certain MQTT permissions can create malicious messages to all CyberPower PowerPanel devices. This coul... |
| CVE-2024-31409 | HIGH | 7.5 | 0.4% | May 15, 2024 | Certain MQTT wildcards are not blocked on the CyberPower PowerPanel system, which might result in an attacker obtainin... |
| CVE-2024-4906 | HIGH | 7.5 | 0.4% | May 15, 2024 | A vulnerability, which was classified as critical, was found in Campcodes Complete Web-Based School Management System 1.... |
| CVE-2024-35102 | HIGH | 8.8 | 0.5% | May 15, 2024 | Insecure Permissions vulnerability in VITEC AvediaServer (Model avsrv-m8105) 8.6.2-1 allows a remote attacker to escalat... |
| CVE-2024-4905 | HIGH | 8.8 | 0.5% | May 15, 2024 | A vulnerability classified as critical has been found in Kashipara College Management System 1.0. Affected is an unknown... |
| CVE-2024-25743 | HIGH | 7.1 | 0.2% | May 15, 2024 | In the Linux kernel through 6.9, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and... |
| CVE-2024-20383 | HIGH | 8.4 | 0.4% | May 15, 2024 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager c... |
| CVE-2024-20366 | HIGH | 7.8 | 0.2% | May 15, 2024 | A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Se... |
| CVE-2024-4622 | HIGH | 8.3 | 0.5% | May 15, 2024 | If misconfigured, alpitronic Hypercharger EV charging devices can expose a web interface protected by authentication. I... |
| CVE-2024-4202 | HIGH | 8.6 | 0.3% | May 15, 2024 | In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an ... |
| CVE-2024-4200 | HIGH | 7.8 | 0.3% | May 15, 2024 | In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a loca... |
| CVE-2024-3970 | HIGH | 7.5 | 0.5% | May 15, 2024 | Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senst... |
| CVE-2024-3485 | HIGH | 7.5 | 0.3% | May 15, 2024 | Server Side Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This could lead to senst... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now