2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33383 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive informatio... |
| CVE-2024-33332 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api... |
| CVE-2024-29384 | HIGH | 7.5 | 0.8% | Apr 30, 2024 | An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information via the content.js and... |
| CVE-2024-34088 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a N... |
| CVE-2024-28269 | HIGH | 7.2 | 1.0% | Apr 30, 2024 | ReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. The file upload is not restricted, le... |
| CVE-2024-26331 | HIGH | 7.5 | 49.3% | Apr 30, 2024 | ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind ... |
| CVE-2024-33831 | HIGH | 7.4 | 0.5% | Apr 30, 2024 | A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows a... |
| CVE-2024-23463 | HIGH | 8.1 | 0.4% | Apr 30, 2024 | Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repa... |
| CVE-2024-29320 | HIGH | 8.1 | 0.7% | Apr 30, 2024 | Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php. |
| CVE-2024-4340 | HIGH | 7.5 | 3.2% | Apr 30, 2024 | Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. |
| CVE-2024-33465 | HIGH | 7.1 | 0.4% | Apr 30, 2024 | Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the t... |
| CVE-2024-33309 | HIGH | 7.5 | 0.8% | Apr 30, 2024 | An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sens... |
| CVE-2024-33274 | HIGH | 7.5 | 1.0% | Apr 30, 2024 | Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sens... |
| CVE-2024-33270 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive ... |
| CVE-2024-28716 | HIGH | 7.5 | 1.4% | Apr 30, 2024 | An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component. |
| CVE-2024-25938 | HIGH | 8.8 | 15.6% | Apr 30, 2024 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially craft... |
| CVE-2024-25648 | HIGH | 8.8 | 15.6% | Apr 30, 2024 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially craf... |
| CVE-2024-25575 | HIGH | 8.8 | 17.7% | Apr 30, 2024 | A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A spec... |
| CVE-2024-23774 | HIGH | 7.8 | 0.4% | Apr 30, 2024 | An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerabi... |
| CVE-2024-23773 | HIGH | 7.8 | 0.4% | Apr 30, 2024 | An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability ex... |
| CVE-2024-2617 | HIGH | 7.2 | 0.7% | Apr 30, 2024 | A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if se... |
| CVE-2024-2378 | HIGH | 8 | 0.2% | Apr 30, 2024 | A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privil... |
| CVE-2024-2377 | HIGH | 7.6 | 0.2% | Apr 30, 2024 | A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can tak... |
| CVE-2024-4337 | HIGH | 7.4 | 0.4% | Apr 30, 2024 | Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripti... |
| CVE-2024-4336 | HIGH | 7.4 | 0.4% | Apr 30, 2024 | Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripti... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now