2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33292 | HIGH | 8.2 | 0.5% | May 1, 2024 | SQL Injection vulnerability in Realisation MGSD v.1.0 allows a remote attacker to obtain sensitive information via the i... |
| CVE-2024-29011 | HIGH | 7.5 | 0.9% | May 1, 2024 | Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects G... |
| CVE-2024-26504 | HIGH | 8.8 | 0.5% | May 1, 2024 | An issue in Wifire Hotspot v.4.5.3 allows a local attacker to execute arbitrary code via a crafted payload to the dst pa... |
| CVE-2024-25458 | HIGH | 7.5 | 0.6% | May 1, 2024 | An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera (circuit board identifier A9-48B-V1.0) firmware v.CYCAM_48B_BC01_v87_0... |
| CVE-2024-25355 | HIGH | 7.5 | 0.6% | May 1, 2024 | s3-url-parser 1.0.3 is vulnerable to Denial of service via the regexes component. |
| CVE-2024-24313 | HIGH | 7.5 | 0.6% | May 1, 2024 | An issue in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive information via the Mode... |
| CVE-2024-24312 | HIGH | 7.5 | 0.5% | May 1, 2024 | SQL injection vulnerability in Vaales Technologies V_QRS v.2024-01-17 allows a remote attacker to obtain sensitive infor... |
| CVE-2024-32212 | HIGH | 8.1 | 0.7% | May 1, 2024 | SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to execute ar... |
| CVE-2024-29010 | HIGH | 7.1 | 0.6% | May 1, 2024 | The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity (XXE) injection, potentially... |
| CVE-2024-33517 | HIGH | 7.5 | 0.6% | May 1, 2024 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via the ... |
| CVE-2024-33516 | HIGH | 7.5 | 0.6% | May 1, 2024 | An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol provi... |
| CVE-2024-33515 | HIGH | 7.5 | 0.6% | May 1, 2024 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protoco... |
| CVE-2024-33514 | HIGH | 7.5 | 0.6% | May 1, 2024 | Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI protoco... |
| CVE-2024-28764 | HIGH | 7.8 | 0.2% | May 1, 2024 | IBM WebSphere Automation 1.7.0 could allow an attacker with privileged access to the network to conduct a CSV injection.... |
| CVE-2024-25015 | HIGH | 7.5 | 0.9% | May 1, 2024 | IBM MQ 9.2 LTS, 9.3 LTS, and 9.3 CD Internet Pass-Thru could allow a remote user to cause a denial of service by sending... |
| CVE-2024-23457 | HIGH | 7.8 | 0.2% | May 1, 2024 | The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninst... |
| CVE-2024-20378 | HIGH | 7.5 | 0.8% | May 1, 2024 | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote ... |
| CVE-2024-20376 | HIGH | 7.5 | 0.9% | May 1, 2024 | A vulnerability in the web-based management interface of Cisco IP Phone firmware could allow an unauthenticated, remote ... |
| CVE-2024-33820 | HIGH | 7.5 | 0.6% | May 1, 2024 | Totolink AC1200 Wireless Dual Band Gigabit Router A3002R_V4 Firmware V4.0.0-B20230531.1404 is vulnerable to Buffer Overf... |
| CVE-2024-28893 | HIGH | 7.7 | 0.3% | May 1, 2024 | Certain HP software packages (SoftPaqs) are potentially vulnerable to arbitrary code execution when the SoftPaq configur... |
| CVE-2024-4368 | HIGH | 8.8 | 1.1% | May 1, 2024 | Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap co... |
| CVE-2024-4331 | HIGH | 8.8 | 1.2% | May 1, 2024 | Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially e... |
| CVE-2024-4058 | HIGH | 8.8 | 8.9% | May 1, 2024 | Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap co... |
| CVE-2024-33775 | HIGH | 8.8 | 1.6% | May 1, 2024 | An issue with the Autodiscover component in Nagios XI 2024R1.01 allows a remote attacker to escalate privileges via a cr... |
| CVE-2024-31412 | HIGH | 7.8 | 0.2% | May 1, 2024 | Out-of-bounds read vulnerability exists in CX-Programmer included in CX-One CXONE-AL[][]D-V4 Ver. 9.81 or lower. Opening... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now