2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52920 | HIGH | 7.5 | 0.6% | Nov 18, 2024 | Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA ... |
| CVE-2024-52919 | MEDIUM | 6.5 | 0.3% | Nov 18, 2024 | Bitcoin Core before 22.0 has a CAddrMan nIdCount integer overflow and resultant assertion failure (and daemon exit) via ... |
| CVE-2024-52918 | MEDIUM | 6.5 | 0.5% | Nov 18, 2024 | Bitcoin-Qt in Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption and ap... |
| CVE-2024-52917 | MEDIUM | 6.5 | 0.3% | Nov 18, 2024 | Bitcoin Core before 22.0 has a miniupnp infinite loop in which it allocates memory on the basis of random data received ... |
| CVE-2024-52916 | HIGH | 7.5 | 0.5% | Nov 18, 2024 | Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty h... |
| CVE-2024-52915 | HIGH | 7.5 | 0.6% | Nov 18, 2024 | Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV m... |
| CVE-2024-52914 | HIGH | 7.5 | 0.5% | Nov 18, 2024 | In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed tr... |
| CVE-2024-52913 | MEDIUM | 5.3 | 0.4% | Nov 18, 2024 | In Bitcoin Core before 0.21.0, an attacker could prevent a node from seeing a specific unconfirmed transaction, because ... |
| CVE-2024-52912 | HIGH | 7.5 | 0.5% | Nov 18, 2024 | Bitcoin Core before 0.21.0 allows a network split that is resultant from an integer overflow (calculating the time offse... |
| CVE-2024-38828 | MEDIUM | 5.3 | 0.7% | Nov 18, 2024 | Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack. |
| CVE-2024-11306 | MEDIUM | 6.9 | 0.5% | Nov 18, 2024 | A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. Th... |
| CVE-2024-11305 | MEDIUM | 6.3 | 3.7% | Nov 18, 2024 | A vulnerability classified as critical was found in Altenergy Power Control Software up to 20241108. This vulnerability ... |
| CVE-2024-0793 | HIGH | 7.7 | 0.6% | Nov 17, 2024 | A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking... |
| CVE-2024-52876 | HIGH | 7.5 | 0.5% | Nov 17, 2024 | Holy Stone Remote ID Module HSRID01, firmware distributed with the Drone Go2 mobile application before 1.1.8, allows una... |
| CVE-2024-52872 | HIGH | 7.5 | 0.4% | Nov 17, 2024 | In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions. |
| CVE-2024-52871 | HIGH | 7.5 | 0.4% | Nov 17, 2024 | In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting. |
| CVE-2024-52867 | HIGH | 8.1 | 0.2% | Nov 17, 2024 | guix-daemon in GNU Guix before 5ab3c4c allows privilege escalation because build outputs are accessible by local users b... |
| CVE-2024-52397 | CRITICAL | 9.1 | 0.5% | Nov 16, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Davor Zeljkovic Convert Docx2post convert-docx2post all... |
| CVE-2024-52416 | CRITICAL | 10 | 0.4% | Nov 16, 2024 | Missing Authorization vulnerability in Eugen Bobrowski Debug Tool debug-tool allows Upload a Web Shell to a Web Server.T... |
| CVE-2024-52415 | HIGH | 8.8 | 0.2% | Nov 16, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in skipstorm SK WP Settings Backup sk-wp-settings-backup allows Object I... |
| CVE-2024-52414 | CRITICAL | 9.8 | 0.5% | Nov 16, 2024 | Deserialization of Untrusted Data vulnerability in Anthony Carbon WDES Responsive Mobile Menu wdes-responsive-mobile-men... |
| CVE-2024-52413 | CRITICAL | 9.8 | 0.7% | Nov 16, 2024 | Deserialization of Untrusted Data vulnerability in dmcwebzone Airin Blog airin-blog allows Object Injection.This issue a... |
| CVE-2024-52412 | CRITICAL | 9.8 | 0.5% | Nov 16, 2024 | Deserialization of Untrusted Data vulnerability in Stephen Cui Xin allows Object Injection.This issue affects Xin: from ... |
| CVE-2024-52411 | CRITICAL | 9.8 | 0.5% | Nov 16, 2024 | Deserialization of Untrusted Data vulnerability in flowcraft Advanced Personalization personalization-by-flowcraft allow... |
| CVE-2024-52410 | CRITICAL | 9.8 | 0.5% | Nov 16, 2024 | Deserialization of Untrusted Data vulnerability in Phoenixheart Referrer Detector referrer-detector allows Object Inject... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now