2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31127 | HIGH | 7.3 | 0.1% | Jun 4, 2025 | An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker t... |
| CVE-2024-45655 | MEDIUM | 5.5 | 0.1% | Jun 3, 2025 | IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to i... |
| CVE-2024-12718 | MEDIUM | 5.3 | 0.6% | Jun 3, 2025 | Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar... |
| CVE-2024-54189 | HIGH | 7.8 | 0.3% | Jun 3, 2025 | A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (b... |
| CVE-2024-52561 | HIGH | 7.8 | 0.2% | Jun 3, 2025 | A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (b... |
| CVE-2024-36486 | HIGH | 7.8 | 0.3% | Jun 3, 2025 | A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Deskto... |
| CVE-2024-53026 | HIGH | 8.2 | 0.3% | Jun 3, 2025 | Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call. |
| CVE-2024-53021 | HIGH | 8.2 | 0.2% | Jun 3, 2025 | Information disclosure may occur while processing goodbye RTCP packet from network. |
| CVE-2024-53020 | HIGH | 8.2 | 0.2% | Jun 3, 2025 | Information disclosure may occur while decoding the RTP packet with invalid header extension from network. |
| CVE-2024-53019 | HIGH | 8.2 | 0.2% | Jun 3, 2025 | Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing so... |
| CVE-2024-53018 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption may occur while processing the OIS packet parser. |
| CVE-2024-53017 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption while handling test pattern generator IOCTL command. |
| CVE-2024-53016 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption while processing I2C settings in Camera driver. |
| CVE-2024-53015 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption while processing IOCTL command to handle buffers associated with a session. |
| CVE-2024-53013 | MEDIUM | 6.6 | 0.1% | Jun 3, 2025 | Memory corruption may occur while processing voice call registration with user. |
| CVE-2024-53010 | HIGH | 7.8 | 0.1% | Jun 3, 2025 | Memory corruption may occur while attaching VM when the HLOS retains access to VM. |
| CVE-2024-8008 | MEDIUM | 5.2 | 0.5% | Jun 2, 2025 | A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encodin... |
| CVE-2024-7074 | MEDIUM | 6.8 | 9.8% | Jun 2, 2025 | An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP... |
| CVE-2024-7073 | MEDIUM | 6.5 | 0.2% | Jun 2, 2025 | A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in ... |
| CVE-2024-3509 | MEDIUM | 4.3 | 0.2% | Jun 2, 2025 | A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insu... |
| CVE-2024-1440 | MEDIUM | 6.1 | 0.2% | Jun 2, 2025 | An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in... |
| CVE-2024-57459 | HIGH | 7.3 | 0.2% | Jun 2, 2025 | A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0. The myds ... |
| CVE-2024-40114 | MEDIUM | 6.1 | 0.2% | Jun 2, 2025 | A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an ... |
| CVE-2024-40113 | MEDIUM | 6.5 | 0.2% | Jun 2, 2025 | Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials. |
| CVE-2024-40112 | MEDIUM | 5.9 | 0.4% | Jun 2, 2025 | A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, wh... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now