2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34523 | HIGH | 7.5 | 0.8% | May 7, 2024 | AChecker 1.5 allows remote attackers to read the contents of arbitrary files via the download.php path parameter by usin... |
| CVE-2024-34342 | HIGH | 7.1 | 1.1% | May 7, 2024 | react-pdf displays PDFs in React apps. If PDF.js is used to load a malicious PDF, and PDF.js is configured with `isEvalS... |
| CVE-2024-34084 | HIGH | 7.5 | 0.6% | May 7, 2024 | Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerab... |
| CVE-2024-32664 | HIGH | 7.3 | 0.9% | May 7, 2024 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr... |
| CVE-2024-32663 | HIGH | 7.5 | 1.0% | May 7, 2024 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr... |
| CVE-2024-32371 | HIGH | 7.5 | 0.7% | May 7, 2024 | An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a regular user account to escalate their p... |
| CVE-2024-33782 | HIGH | 7.5 | 0.7% | May 7, 2024 | MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function OTExtensionWithMatrix::extend in /OT/OTExtens... |
| CVE-2024-33781 | HIGH | 7.5 | 0.7% | May 7, 2024 | MP-SPDZ v0.3.8 was discovered to contain a stack overflow via the function octetStream::get_bytes in /Tools/octetStream.... |
| CVE-2024-29889 | HIGH | 8.1 | 63.2% | May 7, 2024 | GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injec... |
| CVE-2024-4600 | HIGH | 7.1 | 0.2% | May 7, 2024 | Cross-Site Request Forgery vulnerability in Socomec Net Vision, version 7.20. This vulnerability could allow an attacker... |
| CVE-2024-4538 | HIGH | 7.5 | 0.5% | May 7, 2024 | IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to... |
| CVE-2024-4537 | HIGH | 7.5 | 0.7% | May 7, 2024 | IDOR vulnerability in Janto Ticketing Software affecting version 4.3r10. This vulnerability could allow a remote user to... |
| CVE-2024-4599 | HIGH | 7.5 | 0.7% | May 7, 2024 | Remote denial of service vulnerability in LAN Messenger affecting version 3.4.0. This vulnerability allows an attacker t... |
| CVE-2024-4582 | HIGH | 7.3 | 1.4% | May 7, 2024 | A vulnerability classified as critical has been found in Faraday GM8181 and GM828x up to 20240429. Affected is an unknow... |
| CVE-2024-3759 | HIGH | 7.8 | 0.2% | May 7, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through use after free. |
| CVE-2024-3758 | HIGH | 7.8 | 0.2% | May 7, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in TCB through heap buffer over... |
| CVE-2024-27217 | HIGH | 7.8 | 0.2% | May 7, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u... |
| CVE-2024-23808 | HIGH | 7.8 | 0.2% | May 7, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u... |
| CVE-2024-22472 | HIGH | 8.1 | 0.8% | May 7, 2024 | A buffer Overflow vulnerability in Silicon Labs 500 Series Z-Wave devices may allow Denial of Service, and potential Re... |
| CVE-2024-20868 | HIGH | 7.1 | 0.2% | May 7, 2024 | Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung N... |
| CVE-2024-29941 | HIGH | 8 | 0.1% | May 6, 2024 | Insecure storage of the ICT MIFARE and DESFire encryption keys in the firmware binary allows malicious actors to create ... |
| CVE-2024-30973 | HIGH | 8.8 | 0.9% | May 6, 2024 | An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code... |
| CVE-2024-34534 | HIGH | 7.3 | 0.5% | May 6, 2024 | A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module (aka text_commander) 16.0 through 16.0.... |
| CVE-2024-34533 | HIGH | 7.3 | 0.5% | May 6, 2024 | A SQL injection vulnerability in ZI PT Solusi Usaha Mudah Analytic Data Query module (aka izi_data) 11.0 through 17.x be... |
| CVE-2024-28725 | HIGH | 7.1 | 0.4% | May 6, 2024 | Cross Site Scripting (XSS) vulnerability in YzmCMS 7.0 allows attackers to run arbitrary code via Ads Management, Carous... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now