2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-26934 | HIGH | 7.8 | 0.2% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in usb_deauthorize_interfac... |
| CVE-2024-26933 | HIGH | 7.8 | 0.2% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix deadlock in port "disable" sysfs att... |
| CVE-2024-26932 | HIGH | 7.8 | 0.2% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix double-free issue in tcpm_por... |
| CVE-2024-26930 | HIGH | 7.8 | 0.2% | May 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix double free of the ha->vp_map po... |
| CVE-2024-33763 | HIGH | 7.5 | 0.7% | May 1, 2024 | lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp. |
| CVE-2024-4349 | HIGH | 7.3 | 1.0% | Apr 30, 2024 | A vulnerability has been found in SourceCodester Pisay Online E-Learning System 1.0 and classified as critical. Affected... |
| CVE-2024-4192 | HIGH | 7.8 | 0.3% | Apr 30, 2024 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed... |
| CVE-2024-32970 | HIGH | 7.1 | 0.7% | Apr 30, 2024 | Phlex is a framework for building object-oriented views in Ruby. In affected versions there is a potential cross-site sc... |
| CVE-2024-29466 | HIGH | 8.8 | 1.0% | Apr 30, 2024 | Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code vi... |
| CVE-2024-33437 | HIGH | 7.5 | 0.8% | Apr 30, 2024 | An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information due to missing support... |
| CVE-2024-33383 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive informatio... |
| CVE-2024-33332 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api... |
| CVE-2024-29384 | HIGH | 7.5 | 0.8% | Apr 30, 2024 | An issue in CSS Exfil Protection v.1.1.0 allows a remote attacker to obtain sensitive information via the content.js and... |
| CVE-2024-34088 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | In FRRouting (FRR) through 9.1, it is possible for the get_edge() function in ospf_te.c in the OSPF daemon to return a N... |
| CVE-2024-28269 | HIGH | 7.2 | 1.0% | Apr 30, 2024 | ReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. The file upload is not restricted, le... |
| CVE-2024-26331 | HIGH | 7.5 | 49.3% | Apr 30, 2024 | ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind ... |
| CVE-2024-33831 | HIGH | 7.4 | 0.5% | Apr 30, 2024 | A stored cross-site scripting (XSS) vulnerability in the Advanced Expectation - Response module of yapi v1.10.2 allows a... |
| CVE-2024-23463 | HIGH | 8.1 | 0.4% | Apr 30, 2024 | Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repa... |
| CVE-2024-29320 | HIGH | 8.1 | 0.7% | Apr 30, 2024 | Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php. |
| CVE-2024-4340 | HIGH | 7.5 | 3.2% | Apr 30, 2024 | Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. |
| CVE-2024-33465 | HIGH | 7.1 | 0.4% | Apr 30, 2024 | Cross Site Scripting vulnerability in MajorDoMo before v.0662e5e allows an attacker to escalate privileges via the the t... |
| CVE-2024-33309 | HIGH | 7.5 | 0.8% | Apr 30, 2024 | An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to obtain sens... |
| CVE-2024-33274 | HIGH | 7.5 | 1.0% | Apr 30, 2024 | Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sens... |
| CVE-2024-33270 | HIGH | 7.5 | 0.7% | Apr 30, 2024 | An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive ... |
| CVE-2024-28716 | HIGH | 7.5 | 1.4% | Apr 30, 2024 | An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now