2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33602 | HIGH | 7.4 | 0.4% | May 6, 2024 | nscd: netgroup cache assumes NSS callback uses in-buffer strings The Name Service Cache Daemon's (nscd) netgroup cache ... |
| CVE-2024-33601 | HIGH | 7.3 | 1.1% | May 6, 2024 | nscd: netgroup cache may terminate daemon on memory allocation failure The Name Service Cache Daemon's (nscd) netgroup ... |
| CVE-2024-33599 | HIGH | 8.1 | 1.3% | May 6, 2024 | nscd: Stack-based buffer overflow in netgroup cache If the Name Service Cache Daemon's (nscd) fixed size cache is exhau... |
| CVE-2024-33570 | HIGH | 8.8 | 0.4% | May 6, 2024 | Missing Authorization vulnerability in Roxnor Metform metform.This issue affects Metform: from n/a through <= 3.8.3. |
| CVE-2024-33118 | HIGH | 7.5 | 0.2% | May 6, 2024 | LuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.... |
| CVE-2024-3661 | HIGH | 7.6 | 4.1% | May 6, 2024 | DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solution... |
| CVE-2024-34412 | HIGH | 8.5 | 0.5% | May 6, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Parcel Panel Parce... |
| CVE-2024-34386 | HIGH | 7.6 | 0.5% | May 6, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lucian Apostol Aut... |
| CVE-2024-34378 | HIGH | 8.6 | 0.4% | May 6, 2024 | Missing Authorization vulnerability in LeadConnector.This issue affects LeadConnector: from n/a through 1.7. |
| CVE-2024-34369 | HIGH | 7.1 | 0.4% | May 6, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webpushr Web Push ... |
| CVE-2024-34367 | HIGH | 7.1 | 0.2% | May 6, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Scripting (XSS).This issue... |
| CVE-2024-33912 | HIGH | 8.8 | 0.4% | May 6, 2024 | Missing Authorization vulnerability in Academy LMS.This issue affects Academy LMS: from n/a through 1.9.16. |
| CVE-2024-34388 | HIGH | 7.5 | 0.6% | May 6, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects G... |
| CVE-2024-33410 | HIGH | 8.1 | 0.6% | May 6, 2024 | SQL injection vulnerability in /model/delete_range_grade.php in campcodes Complete Web-Based School Management System 1.... |
| CVE-2024-33406 | HIGH | 7.3 | 0.4% | May 6, 2024 | SQL injection vulnerability in /model/delete_student_grade_subject.php in campcodes Complete Web-Based School Management... |
| CVE-2024-33405 | HIGH | 8.6 | 0.5% | May 6, 2024 | SQL injection vulnerability in add_friends.php in campcodes Complete Web-Based School Management System 1.0 allows attac... |
| CVE-2024-33404 | HIGH | 8.3 | 0.6% | May 6, 2024 | A SQL injection vulnerability in /model/add_student_first_payment.php in campcodes Complete Web-Based School Management ... |
| CVE-2024-32807 | HIGH | 8.5 | 0.6% | May 6, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brevo Sendinblue for Woo... |
| CVE-2024-34251 | HIGH | 7.5 | 0.8% | May 6, 2024 | An out-of-bound memory read vulnerability was discovered in Bytecode Alliance wasm-micro-runtime v2.0.0 which allows a r... |
| CVE-2024-34246 | HIGH | 7.5 | 0.5% | May 6, 2024 | wasm3 v0.5.0 was discovered to contain an out-of-bound memory read which leads to segmentation fault via the function "m... |
| CVE-2024-34092 | HIGH | 8.8 | 0.4% | May 6, 2024 | An issue was discovered in Archer Platform 6 before 2024.04. Authentication was mishandled because lock did not terminat... |
| CVE-2024-34470 | HIGH | 8.6 | 6.7% | May 6, 2024 | An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path Traversal vulnerability ... |
| CVE-2024-34252 | HIGH | 7.5 | 0.6% | May 6, 2024 | wasm3 v0.5.0 was discovered to contain a global buffer overflow which leads to segmentation fault via the function "Pres... |
| CVE-2024-34069 | HIGH | 7.5 | 3.4% | May 6, 2024 | Werkzeug is a comprehensive WSGI web application library. The debugger in affected versions of Werkzeug can allow an att... |
| CVE-2024-33112 | HIGH | 7.5 | 6.5% | May 6, 2024 | D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now