2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25938 | HIGH | 8.8 | 15.6% | Apr 30, 2024 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Barcode widget. A specially craft... |
| CVE-2024-25648 | HIGH | 8.8 | 15.6% | Apr 30, 2024 | A use-after-free vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a ComboBox widget. A specially craf... |
| CVE-2024-25575 | HIGH | 8.8 | 17.7% | Apr 30, 2024 | A type confusion vulnerability vulnerability exists in the way Foxit Reader 2024.1.0.23997 handles a Lock object. A spec... |
| CVE-2024-23774 | HIGH | 7.8 | 0.4% | Apr 30, 2024 | An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An unquoted Windows search path vulnerabi... |
| CVE-2024-23773 | HIGH | 7.8 | 0.4% | Apr 30, 2024 | An issue was discovered in Quest KACE Agent for Windows 12.0.38 and 13.1.23.0. An Arbitrary file delete vulnerability ex... |
| CVE-2024-2617 | HIGH | 7.2 | 0.7% | Apr 30, 2024 | A vulnerability exists in the RTU500 that allows for authenticated and authorized users to bypass secure update, if se... |
| CVE-2024-2378 | HIGH | 8 | 0.2% | Apr 30, 2024 | A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privil... |
| CVE-2024-2377 | HIGH | 7.6 | 0.2% | Apr 30, 2024 | A vulnerability exists in the too permissive HTTP response header web server settings of the SDM600. An attacker can tak... |
| CVE-2024-4337 | HIGH | 7.4 | 0.4% | Apr 30, 2024 | Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripti... |
| CVE-2024-4336 | HIGH | 7.4 | 0.4% | Apr 30, 2024 | Adive Framework 2.0.8, does not sufficiently encode user-controlled inputs, resulting in a persistent Cross-Site Scripti... |
| CVE-2024-4185 | HIGH | 8.1 | 0.9% | Apr 30, 2024 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Email Verification and Authenticat... |
| CVE-2024-2663 | HIGH | 8.3 | 0.4% | Apr 30, 2024 | The ZD YouTube FLV Player plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and i... |
| CVE-2024-1895 | HIGH | 7.5 | 0.9% | Apr 30, 2024 | The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress is vulnerable to PHP Object I... |
| CVE-2024-4225 | HIGH | 7.6 | 0.3% | Apr 30, 2024 | Multiple security vulnerabilities has been discovered in web interface of NetGuardian DIN Remote Telemetry Unit (RTU), b... |
| CVE-2024-31837 | HIGH | 8.4 | 0.2% | Apr 30, 2024 | DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a threat model similar to CVE... |
| CVE-2024-34050 | HIGH | 7.5 | 0.5% | Apr 30, 2024 | Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return uint64(b[2])<<... |
| CVE-2024-34049 | HIGH | 7.5 | 0.5% | Apr 30, 2024 | Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString[0... |
| CVE-2024-34046 | HIGH | 7.5 | 0.5% | Apr 30, 2024 | The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParam... |
| CVE-2024-34045 | HIGH | 7.5 | 0.5% | Apr 30, 2024 | The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->counters[... |
| CVE-2024-27518 | HIGH | 7.8 | 0.6% | Apr 29, 2024 | An issue in SUPERAntiSyware Professional X 10.0.1262 and 10.0.1264 allows unprivileged attackers to escalate privileges ... |
| CVE-2024-33271 | HIGH | 7.5 | 0.5% | Apr 29, 2024 | An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps_custom... |
| CVE-2024-31801 | HIGH | 7.5 | 1.1% | Apr 29, 2024 | Directory Traversal vulnerability in NEXSYS-ONE before v.Rev.15320 allows a remote attacker to obtain sensitive informat... |
| CVE-2024-0840 | HIGH | 8.8 | 0.9% | Apr 29, 2024 | The Grandstream UCM Series IP PBX before firmware version 1.0.20.52 is affected by a parameter injection vulnerability i... |
| CVE-2024-33443 | HIGH | 7.1 | 0.7% | Apr 29, 2024 | An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsControll... |
| CVE-2024-33438 | HIGH | 8 | 1.1% | Apr 29, 2024 | File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now