2024 CVE Vulnerabilities

39,266 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-0087HIGH8.8NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitr...
CVE-2024-34244HIGH7.5libmodbus v3.1.10 is vulnerable to Buffer Overflow via the modbus_write_bits function. This issue can be triggered when ...
CVE-2024-22460HIGH7.2Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability. A remote attacke...
CVE-2024-4653HIGH7.5A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1 and classified as critical. Affected by t...
CVE-2024-3951HIGH7.1 PTC Codebeamer is vulnerable to a cross site scripting vulnerability that could allow an attacker to inject and execute...
CVE-2024-34347HIGH8.3@hoppscotch/cli is a CLI to run Hoppscotch Test Scripts in CI environments. Prior to 0.8.0, the @hoppscotch/js-sandbox p...
CVE-2024-33608HIGH7.5When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to ...
CVE-2024-32049HIGH7.4BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instanc...
CVE-2024-31156HIGH8 A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility tha...
CVE-2024-28883HIGH7.4An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and ...
CVE-2024-26026HIGH7.5An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have ...
CVE-2024-25560HIGH7.5 When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM)...
CVE-2024-25526HIGH8.1RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the project_id parameter at /Proje...
CVE-2024-25515HIGH7.3RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the sys_file_storage_id parameter ...
CVE-2024-21793HIGH7.5An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which hav...
CVE-2024-31270HIGH8Missing Authorization vulnerability in Repute InfoSystems ARForms Form Builder.This issue affects ARForms Form Builder: ...
CVE-2024-24833HIGH8.8Missing Authorization vulnerability in HappyMonster Happy Addons for Elementor happy-elementor-addons.This issue affects...
CVE-2024-1438HIGH7.7Missing Authorization vulnerability in PressFore Rolo Slider.This issue affects Rolo Slider: from n/a through 1.0.9.
CVE-2024-3507HIGH7.7Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerabil...
CVE-2024-4438HIGH7.5The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2023-39325/CVE-2023-44487...
CVE-2024-4437HIGH7.5The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716. This issue oc...
CVE-2024-4436HIGH7.5The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723. This issue oc...
CVE-2024-22264HIGH7.2VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious actor with admin privileges on VMwar...
CVE-2024-2860HIGH7.8The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authenticatio...
CVE-2024-2746HIGH8.8Incomplete fix for CVE-2024-1929 The problem with CVE-2024-1929 was that the dnf5 D-Bus daemon accepted arbitrary confi...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now