2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-34469 | HIGH | 7.1 | 0.6% | May 4, 2024 | Rukovoditel before 3.5.3 allows XSS via user_photo to index.php?module=users/registration&action=save. |
| CVE-2024-3240 | HIGH | 8.8 | 0.8% | May 4, 2024 | The ConvertPlug plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.5.25 ... |
| CVE-2024-34455 | HIGH | 7.5 | 0.7% | May 3, 2024 | Buildroot before 0b2967e lacks the sticky bit for the /dev/shm directory. A fix was released in 2024.02.2. |
| CVE-2024-34066 | HIGH | 8.4 | 0.5% | May 3, 2024 | Pterodactyl wings is the server control plane for Pterodactyl Panel. If the Wings token is leaked either by viewing the ... |
| CVE-2024-27453 | HIGH | 8.6 | 0.7% | May 3, 2024 | In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the... |
| CVE-2024-28519 | HIGH | 7.8 | 0.2% | May 3, 2024 | A kernel handle leak issue in ProcObsrvesx.sys 4.0.0.49 in MicroWorld Technologies Inc eScan Antivirus could allow privi... |
| CVE-2024-34447 | HIGH | 7.5 | 0.8% | May 3, 2024 | An issue was discovered in the Bouncy Castle Crypto Package For Java before BC TLS Java 1.0.19 (ships with BC Java 1.78,... |
| CVE-2024-33398 | HIGH | 7.5 | 0.6% | May 3, 2024 | There is a ClusterRole in piraeus-operator v2.5.0 and earlier which has been granted list secrets permission, which allo... |
| CVE-2024-34446 | HIGH | 7.5 | 0.6% | May 3, 2024 | Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state (after a hard failure to create a ... |
| CVE-2024-33844 | HIGH | 7.5 | 0.7% | May 3, 2024 | The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attack... |
| CVE-2024-29417 | HIGH | 8.4 | 0.2% | May 3, 2024 | Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges ... |
| CVE-2024-1067 | HIGH | 7.4 | 0.2% | May 3, 2024 | Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Ge... |
| CVE-2024-33787 | HIGH | 8.2 | 0.4% | May 3, 2024 | Hengan Weighing Management Information Query Platform 2019-2021 53.25 was discovered to contain a SQL injection vulnerab... |
| CVE-2024-4461 | HIGH | 7.8 | 0.2% | May 3, 2024 | Unquoted path or search item vulnerability in SugarSync versions prior to 4.1.3 for Windows. This misconfiguration could... |
| CVE-2024-34073 | HIGH | 7.8 | 1.1% | May 3, 2024 | sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. In affected ve... |
| CVE-2024-34072 | HIGH | 7.8 | 0.4% | May 3, 2024 | sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.... |
| CVE-2024-33921 | HIGH | 8.8 | 0.4% | May 3, 2024 | Broken Access Control vulnerability in ReviewX.This issue affects ReviewX: from n/a through 1.6.21. |
| CVE-2024-33924 | HIGH | 7.1 | 0.3% | May 3, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Realtyna Realtyna ... |
| CVE-2024-32810 | HIGH | 7.6 | 0.4% | May 3, 2024 | Missing Authorization vulnerability in ShortPixel ShortPixel Critical CSS.This issue affects ShortPixel Critical CSS: fr... |
| CVE-2024-33946 | HIGH | 7.1 | 0.3% | May 3, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPify s.R.O. WPify... |
| CVE-2024-34402 | HIGH | 8.6 | 1.2% | May 3, 2024 | An issue was discovered in uriparser through 0.9.7. ComposeQueryEngine in UriQuery.c has an integer overflow via long ke... |
| CVE-2024-34033 | HIGH | 8.8 | 1.0% | May 3, 2024 | Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal atta... |
| CVE-2024-34032 | HIGH | 8.8 | 8.7% | May 3, 2024 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoin... |
| CVE-2024-34031 | HIGH | 8.8 | 0.5% | May 3, 2024 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx... |
| CVE-2024-30306 | HIGH | 7.8 | 0.5% | May 2, 2024 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability when ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now