2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31476 | HIGH | 8.8 | 1.5% | May 14, 2024 | Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of... |
| CVE-2024-31475 | HIGH | 8.2 | 0.4% | May 14, 2024 | There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access... |
| CVE-2024-31474 | HIGH | 8.2 | 0.4% | May 14, 2024 | There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management p... |
| CVE-2024-31556 | HIGH | 7.8 | 0.2% | May 14, 2024 | An issue in Reportico Web before v.8.1.0 allows a local attacker to execute arbitrary code and obtain sensitive informat... |
| CVE-2024-32465 | HIGH | 7.8 | 0.9% | May 14, 2024 | Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to ... |
| CVE-2024-32021 | HIGH | 7.1 | 1.0% | May 14, 2024 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when clo... |
| CVE-2024-3676 | HIGH | 7.5 | 0.4% | May 14, 2024 | The Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains an Improper Input Validation vulnerabili... |
| CVE-2024-32004 | HIGH | 7.8 | 1.3% | May 14, 2024 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attac... |
| CVE-2024-2637 | HIGH | 7.2 | 0.2% | May 14, 2024 | An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation A... |
| CVE-2024-4777 | HIGH | 8.8 | 0.5% | May 14, 2024 | Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidenc... |
| CVE-2024-4776 | HIGH | 8.2 | 0.4% | May 14, 2024 | A file dialog shown while in full-screen mode could have resulted in the window remaining disabled. This vulnerability a... |
| CVE-2024-4773 | HIGH | 7.5 | 0.5% | May 14, 2024 | When a network error occurred during page load, the prior content could have remained in view with a blank URL bar. This... |
| CVE-2024-4771 | HIGH | 8.6 | 0.5% | May 14, 2024 | A memory allocation check was missing which would lead to a use-after-free if the allocation failed. This could have tri... |
| CVE-2024-4770 | HIGH | 8.8 | 0.6% | May 14, 2024 | When saving a page to PDF, certain font styles could have led to a potential use-after-free crash. This vulnerability af... |
| CVE-2024-4765 | HIGH | 8.1 | 0.3% | May 14, 2024 | Web application manifests were stored by using an insecure MD5 hash which allowed for a hash collision to overwrite anot... |
| CVE-2024-4367 | HIGH | 8.8 | 72.6% | May 14, 2024 | A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js c... |
| CVE-2024-27110 | HIGH | 8.4 | 0.3% | May 14, 2024 | Elevation of privilege vulnerability in GE HealthCare EchoPAC products |
| CVE-2024-31491 | HIGH | 8.8 | 0.8% | May 14, 2024 | A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandb... |
| CVE-2024-30051 | HIGH | 7.8 | 5.7% | May 14, 2024 | Windows DWM Core Library Elevation of Privilege Vulnerability |
| CVE-2024-30049 | HIGH | 7.8 | 0.7% | May 14, 2024 | Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability |
| CVE-2024-30044 | HIGH | 7.2 | 84.0% | May 14, 2024 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2024-30043 | HIGH | 7.5 | 54.7% | May 14, 2024 | Microsoft SharePoint Server Information Disclosure Vulnerability |
| CVE-2024-30042 | HIGH | 7.8 | 2.1% | May 14, 2024 | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2024-30040 | HIGH | 8.8 | 3.9% | May 14, 2024 | Windows MSHTML Platform Security Feature Bypass Vulnerability |
| CVE-2024-30038 | HIGH | 7.8 | 2.6% | May 14, 2024 | Win32k Elevation of Privilege Vulnerability |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now