2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34345 | HIGH | 8.1 | 0.9% | May 14, 2024 | The CycloneDX JavaScript library contains the core functionality of OWASP CycloneDX for JavaScript. In 6.7.0, XML Extern... |
| CVE-2024-34338 | HIGH | 7.2 | 2.8% | May 14, 2024 | Tenda O3V2 with firmware versions V1.0.0.10 and V1.0.0.12 was discovered to contain a Blind Command Injection via dest p... |
| CVE-2024-34310 | HIGH | 8.8 | 0.9% | May 14, 2024 | Jin Fang Times Content Management System v3.2.3 was discovered to contain a SQL injection vulnerability via the id param... |
| CVE-2024-34308 | HIGH | 8.8 | 0.6% | May 14, 2024 | TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the password parameter in the funct... |
| CVE-2024-34231 | HIGH | 7.1 | 0.5% | May 14, 2024 | A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execu... |
| CVE-2024-34224 | HIGH | 7.3 | 0.9% | May 14, 2024 | Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using P... |
| CVE-2024-34221 | HIGH | 8.8 | 0.8% | May 14, 2024 | Sourcecodester Human Resource Management System 1.0 is vulnerable to Insecure Permissions resulting in privilege escalat... |
| CVE-2024-34220 | HIGH | 7.5 | 0.8% | May 14, 2024 | Sourcecodester Human Resource Management System 1.0 is vulnerable to SQL Injection via the 'leave' parameter. |
| CVE-2024-34219 | HIGH | 8.6 | 20.8% | May 14, 2024 | TOTOLINK CP450 V4.1.0cu.747_B20191224 was discovered to contain a vulnerability in the SetTelnetCfg function, which allo... |
| CVE-2024-34217 | HIGH | 7.7 | 0.6% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the addWlProfil... |
| CVE-2024-34215 | HIGH | 7.3 | 0.6% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setUrlFilte... |
| CVE-2024-34212 | HIGH | 7.3 | 0.6% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunu... |
| CVE-2024-34211 | HIGH | 8.8 | 0.5% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample... |
| CVE-2024-34210 | HIGH | 7.3 | 1.2% | May 14, 2024 | TOTOLINK outdoor CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the Clo... |
| CVE-2024-34207 | HIGH | 8.8 | 0.8% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setStaticDh... |
| CVE-2024-34205 | HIGH | 7.3 | 1.2% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a command injection vulnerability in the download_firmwa... |
| CVE-2024-34201 | HIGH | 7.3 | 0.6% | May 14, 2024 | TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the getSaveConf... |
| CVE-2024-34200 | HIGH | 8.8 | 0.9% | May 14, 2024 | TOTOLINK CPE CP450 v4.1.0cu.747_B20191224 was discovered to contain a stack buffer overflow vulnerability in the setIpQo... |
| CVE-2024-34199 | HIGH | 8.6 | 1.2% | May 14, 2024 | TinyWeb 1.94 and below allows unauthenticated remote attackers to cause a denial of service (Buffer Overflow) when sendi... |
| CVE-2024-34196 | HIGH | 8.8 | 0.7% | May 14, 2024 | Totolink AC1200 Wireless Dual Band Gigabit Router A3002RU_V3 Firmware V3.0.0-B20230809.1615 is vulnerable to Buffer Over... |
| CVE-2024-34077 | HIGH | 7.3 | 1.2% | May 14, 2024 | MantisBT (Mantis Bug Tracker) is an open source issue tracker. Insufficient access control in the registration and passw... |
| CVE-2024-33877 | HIGH | 8.8 | 0.9% | May 14, 2024 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5T__conv_struct_opt in H5Tconv.c. |
| CVE-2024-33873 | HIGH | 8.8 | 0.9% | May 14, 2024 | HDF5 Library through 1.14.3 has a heap-based buffer overflow in H5D__scatter_mem in H5Dscatgath.c. |
| CVE-2024-33818 | HIGH | 7.5 | 0.6% | May 14, 2024 | Globitel KSA SpeechLog v8.1 was discovered to contain an Insecure Direct Object Reference (IDOR) via the userID paramete... |
| CVE-2024-33250 | HIGH | 7.2 | 0.7% | May 14, 2024 | An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a re... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now