2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1929 | HIGH | 8.4 | 0.3% | May 8, 2024 | Local Root Exploit via Configuration Dictionary in dnf5daemon-server before 5.1.17 allows a malicious user to impact Co... |
| CVE-2024-4030 | HIGH | 7.1 | 0.3% | May 7, 2024 | On Windows a directory returned by tempfile.mkdtemp() would not always have permissions set to restrict reading and writ... |
| CVE-2024-27273 | HIGH | 7.8 | 0.1% | May 7, 2024 | IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose app... |
| CVE-2024-23713 | HIGH | 7.8 | 0.1% | May 7, 2024 | In migrateNotificationFilter of NotificationManagerService.java, there is a possible failure to persist notifications se... |
| CVE-2024-23710 | HIGH | 7.8 | 0.1% | May 7, 2024 | In assertPackageWithSharedUserIdIsPrivileged of InstallPackageHelper.java, there is a possible execution of arbitrary ap... |
| CVE-2024-23708 | HIGH | 7.8 | 0.3% | May 7, 2024 | In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a cli... |
| CVE-2024-23707 | HIGH | 7.8 | 0.1% | May 7, 2024 | In multiple locations, there is a possible permissions bypass due to improper input validation. This could lead to local... |
| CVE-2024-23706 | HIGH | 7.8 | 0.1% | May 7, 2024 | In multiple locations, there is a possible bypass of health data permissions due to an improper input validation. This c... |
| CVE-2024-23705 | HIGH | 7.8 | 0.3% | May 7, 2024 | In multiple locations, there is a possible failure to persist or enforce user restrictions due to improper input validat... |
| CVE-2024-23704 | HIGH | 7.8 | 0.1% | May 7, 2024 | In onCreate of WifiDialogActivity.java, there is a possible way to bypass the DISALLOW_ADD_WIFI_CONFIG restriction due t... |
| CVE-2024-0043 | HIGH | 7.8 | 0.1% | May 7, 2024 | In multiple locations, there is a possible notification listener grant to an app running in the work profile due to a lo... |
| CVE-2024-0042 | HIGH | 7.8 | 0.1% | May 7, 2024 | In TBD of TBD, there is a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead ... |
| CVE-2024-0025 | HIGH | 7.8 | 0.1% | May 7, 2024 | In sendIntentSender of ActivityManagerService.java, there is a possible background activity launch due to a logic error.... |
| CVE-2024-0024 | HIGH | 7.8 | 0.1% | May 7, 2024 | In multiple methods of UserManagerService.java, there is a possible failure to persist or enforce user restrictions due ... |
| CVE-2024-34315 | HIGH | 7.5 | 0.7% | May 7, 2024 | CmsEasy v7.7.7.9 was discovered to contain a local file inclusion vunerability via the file_get_contents function in the... |
| CVE-2024-25513 | HIGH | 7.8 | 0.3% | May 7, 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the file_id parameter at /Corporat... |
| CVE-2024-25512 | HIGH | 8.1 | 0.5% | May 7, 2024 | RuvarOA v6.01 and v12.01 were discovered to contain a SQL injection vulnerability via the attach_id parameter at /Bullet... |
| CVE-2024-33149 | HIGH | 8.1 | 0.5% | May 7, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessLis... |
| CVE-2024-33148 | HIGH | 7.3 | 0.4% | May 7, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list functio... |
| CVE-2024-33147 | HIGH | 8.8 | 0.5% | May 7, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList... |
| CVE-2024-29207 | HIGH | 7.5 | 0.3% | May 7, 2024 | An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of t... |
| CVE-2024-29150 | HIGH | 8.8 | 0.5% | May 7, 2024 | An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones throu... |
| CVE-2024-29149 | HIGH | 7.4 | 0.2% | May 7, 2024 | An issue was discovered in Alcatel-Lucent ALE NOE deskphones through 86x8_NOE-R300.1.40.12.4180 and SIP deskphones throu... |
| CVE-2024-33144 | HIGH | 8.8 | 0.5% | May 7, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedT... |
| CVE-2024-33139 | HIGH | 7.5 | 0.5% | May 7, 2024 | J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage fun... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now