2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49592 | MEDIUM | 6.7 | 0.2% | Nov 15, 2024 | Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation ... |
| CVE-2024-49060 | HIGH | 8.8 | 0.4% | Nov 15, 2024 | Azure Stack HCI Elevation of Privilege Vulnerability |
| CVE-2024-45611 | MEDIUM | 5.4 | 0.3% | Nov 15, 2024 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track... |
| CVE-2024-45610 | MEDIUM | 6.1 | 0.3% | Nov 15, 2024 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track... |
| CVE-2024-44758 | CRITICAL | 9.8 | 0.7% | Nov 15, 2024 | An arbitrary file upload vulnerability in the component /Production/UploadFile of NUS-M9 ERP Management Software v3.0.0 ... |
| CVE-2024-11217 | MEDIUM | 4.9 | 0.4% | Nov 15, 2024 | A vulnerability was found in the OAuth-server. OAuth-server logs the OAuth2 client secret when the logLevel is Debug hig... |
| CVE-2024-49536 | MEDIUM | 5.5 | 0.2% | Nov 15, 2024 | Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disc... |
| CVE-2024-45609 | MEDIUM | 6.1 | 0.3% | Nov 15, 2024 | GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking an... |
| CVE-2024-44759 | HIGH | 7.5 | 0.4% | Nov 15, 2024 | An arbitrary file download vulnerability in the component /Doc/DownloadFile of NUS-M9 ERP Management Software v3.0.0 all... |
| CVE-2024-3334 | MEDIUM | 4.3 | 0.1% | Nov 15, 2024 | A security bypass vulnerability exists in the Removable Media Encryption (RME)component of Digital Guardian Windows Agen... |
| CVE-2024-24459 | MEDIUM | 5.9 | 0.3% | Nov 15, 2024 | An invalid memory access when handling the ProtocolIE_ID field of S1Setup Request messages in Athonet vEPC MME v11.4.0 a... |
| CVE-2024-24458 | MEDIUM | 5.9 | 0.3% | Nov 15, 2024 | An invalid memory access when handling the ENB Configuration Transfer messages containing invalid PLMN Identities in Ath... |
| CVE-2024-24457 | MEDIUM | 5.9 | 0.3% | Nov 15, 2024 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB Setup List Context SURes messages in Athonet vEP... |
| CVE-2024-24455 | MEDIUM | 5.9 | 0.3% | Nov 15, 2024 | An invalid memory access when handling a UE Context Release message containing an invalid UE identifier in Athonet vEPC ... |
| CVE-2024-24454 | MEDIUM | 5.9 | 0.3% | Nov 15, 2024 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB Modify Request messages in Athonet vEPC MME v11.... |
| CVE-2024-24453 | MEDIUM | 5.9 | 0.3% | Nov 15, 2024 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB NotToBeModifiedBearerModInd information element ... |
| CVE-2024-24452 | MEDIUM | 5.9 | 0.4% | Nov 15, 2024 | An invalid memory access when handling the ProtocolIE_ID field of E-RAB Release Indication messages in Athonet vEPC MME ... |
| CVE-2024-11259 | MEDIUM | 6.1 | 0.4% | Nov 15, 2024 | A vulnerability, which was classified as problematic, has been found in code-projects Farmacia 1.0. This issue affects s... |
| CVE-2024-11258 | CRITICAL | 9.8 | 0.8% | Nov 15, 2024 | A vulnerability classified as critical was found in 1000 Projects Beauty Parlour Management System 1.0. This vulnerabili... |
| CVE-2024-11257 | CRITICAL | 9.8 | 0.7% | Nov 15, 2024 | A vulnerability classified as critical has been found in 1000 Projects Beauty Parlour Management System 1.0. This affect... |
| CVE-2024-11256 | CRITICAL | 9.8 | 0.7% | Nov 15, 2024 | A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue af... |
| CVE-2024-10934 | CRITICAL | 9.8 | 0.4% | Nov 15, 2024 | In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and s... |
| CVE-2024-51330 | MEDIUM | 5.1 | 0.2% | Nov 15, 2024 | An issue in UltiMaker Cura v.4.41 and 5.8.1 and before allows a local attacker to execute arbitrary code via Inter-proce... |
| CVE-2024-51142 | MEDIUM | 5.4 | 0.3% | Nov 15, 2024 | Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows an attacker to execute arbitrary code via the svkey p... |
| CVE-2024-51141 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | An issue in TOTOLINK Bluetooth Wireless Adapter A600UB allows a local attacker to execute arbitrary code via the WifiAut... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now