2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-51037 | MEDIUM | 5.3 | 0.3% | Nov 15, 2024 | An issue in kodbox v.1.52.04 and before allows a remote attacker to obtain sensitive information via the captcha feature... |
| CVE-2024-45971 | CRITICAL | 9.8 | 0.6% | Nov 15, 2024 | Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit 1f52be9ddeae00e69cd43e4cac3cb4f0c... |
| CVE-2024-45970 | CRITICAL | 9.8 | 0.6% | Nov 15, 2024 | Multiple Buffer overflows in the MMS Client in MZ Automation LibIEC61850 before commit ac925fae8e281ac6defcd630e9dd75626... |
| CVE-2024-45969 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | NULL pointer dereference in the MMS Client in MZ Automation LibIEC1850 before commit 7afa40390b26ad1f4cf93deaa0052fe7e35... |
| CVE-2024-45608 | HIGH | 8.8 | 0.5% | Nov 15, 2024 | GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing it... |
| CVE-2024-43418 | MEDIUM | 6.1 | 0.4% | Nov 15, 2024 | GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI ... |
| CVE-2024-43417 | MEDIUM | 6.1 | 0.4% | Nov 15, 2024 | GLPI is a free asset and IT management software package. An unauthenticated user can provide a malicious link to a GLPI ... |
| CVE-2024-41679 | HIGH | 8.8 | 0.5% | Nov 15, 2024 | GLPI is a free asset and IT management software package. An authenticated user can exploit a SQL injection vulnerability... |
| CVE-2024-24446 | MEDIUM | 6.5 | 0.3% | Nov 15, 2024 | An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Ser... |
| CVE-2024-24431 | HIGH | 7.5 | 0.6% | Nov 15, 2024 | A reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service... |
| CVE-2024-24426 | HIGH | 7.5 | 0.5% | Nov 15, 2024 | Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation ... |
| CVE-2024-24425 | MEDIUM | 6.5 | 0.4% | Nov 15, 2024 | Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req f... |
| CVE-2024-23169 | MEDIUM | 4.6 | 0.3% | Nov 15, 2024 | The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where textbox on the Reports scre... |
| CVE-2024-52522 | MEDIUM | 5.4 | 0.2% | Nov 15, 2024 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure h... |
| CVE-2024-52514 | LOW | 3.5 | 0.5% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being bloc... |
| CVE-2024-52513 | MEDIUM | 4.3 | 0.5% | Nov 15, 2024 | Nextcloud Server is a self hosted personal cloud system. After receiving a "Files drop" or "Password protected" share li... |
| CVE-2024-52512 | MEDIUM | 6.1 | 0.4% | Nov 15, 2024 | user_oidc app is an OpenID Connect user backend for Nextcloud. A malicious user could send a malformed login link that w... |
| CVE-2024-52511 | MEDIUM | 6.5 | 0.4% | Nov 15, 2024 | Nextcloud Tables allows users to to create tables with individual columns. By directly specifying the ID of a table or v... |
| CVE-2024-52510 | HIGH | 7.5 | 0.7% | Nov 15, 2024 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. The Desktop client... |
| CVE-2024-52509 | MEDIUM | 5.7 | 0.5% | Nov 15, 2024 | Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. The Nextcloud mail app incorrectly al... |
| CVE-2024-52508 | HIGH | 8.1 | 0.7% | Nov 15, 2024 | Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mai... |
| CVE-2024-52507 | MEDIUM | 4.3 | 0.4% | Nov 15, 2024 | Nextcloud Tables allows users to to create tables with individual columns. The information which Table (numeric ID) is s... |
| CVE-2024-50800 | MEDIUM | 5.4 | 0.4% | Nov 15, 2024 | Cross Site Scripting vulnerability in M2000 Smart4Web before v.5.020241004 allows a remote attacker to execute arbitrary... |
| CVE-2024-47759 | MEDIUM | 4.8 | 0.4% | Nov 15, 2024 | GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. T... |
| CVE-2024-46467 | HIGH | 7.8 | 0.2% | Nov 15, 2024 | By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical f... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now