2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1657 | HIGH | 8.1 | 0.4% | Apr 25, 2024 | A flaw was found in the ansible automation platform. An insecure WebSocket connection was being used in installation fro... |
| CVE-2024-1139 | HIGH | 7.7 | 0.9% | Apr 25, 2024 | A credentials leak vulnerability was found in the cluster monitoring operator in OCP. This issue may allow a remote att... |
| CVE-2024-4171 | HIGH | 8.8 | 1.4% | Apr 25, 2024 | A vulnerability classified as critical has been found in Tenda W30E 1.0/1.0.1.25. Affected is the function fromWizardHan... |
| CVE-2024-4024 | HIGH | 8.8 | 14.9% | Apr 25, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starti... |
| CVE-2024-4170 | HIGH | 8.8 | 1.7% | Apr 25, 2024 | A vulnerability was found in Tenda 4G300 1.01.42. It has been rated as critical. This issue affects the function sub_429... |
| CVE-2024-4169 | HIGH | 8.8 | 1.8% | Apr 25, 2024 | A vulnerability was found in Tenda 4G300 1.01.42. It has been declared as critical. This vulnerability affects the funct... |
| CVE-2024-33247 | HIGH | 8.8 | 0.7% | Apr 25, 2024 | Sourcecodester Employee Task Management System v1.0 is vulnerable to SQL Injection via admin-manage-user.php. |
| CVE-2024-25026 | HIGH | 7.5 | 0.8% | Apr 25, 2024 | IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vul... |
| CVE-2024-4168 | HIGH | 8.8 | 1.8% | Apr 25, 2024 | A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub_4260... |
| CVE-2024-4167 | HIGH | 8.8 | 1.8% | Apr 25, 2024 | A vulnerability was found in Tenda 4G300 1.01.42 and classified as critical. Affected by this issue is the function sub_... |
| CVE-2024-4166 | HIGH | 8.8 | 1.8% | Apr 25, 2024 | A vulnerability has been found in Tenda 4G300 1.01.42 and classified as critical. Affected by this vulnerability is the ... |
| CVE-2024-2829 | HIGH | 7.5 | 26.0% | Apr 25, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.5 before 16.9.6, all versions start... |
| CVE-2024-2434 | HIGH | 8.1 | 22.9% | Apr 25, 2024 | An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.1... |
| CVE-2024-4077 | HIGH | 7.1 | 0.4% | Apr 25, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesig... |
| CVE-2024-25583 | HIGH | 7.5 | 0.8% | Apr 25, 2024 | A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of ... |
| CVE-2024-25917 | HIGH | 8.8 | 0.6% | Apr 25, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in CodeRevolution WP Setup Wizard.This issue af... |
| CVE-2024-4161 | HIGH | 7.5 | 0.5% | Apr 25, 2024 | In Brocade SANnav, before Brocade SANnav v2.3.0, syslog traffic received clear text. This could allow an unauthenticate... |
| CVE-2024-29205 | HIGH | 7.5 | 1.6% | Apr 25, 2024 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x... |
| CVE-2024-26924 | HIGH | 7.8 | 1.3% | Apr 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: do not free live element... |
| CVE-2024-23527 | HIGH | 7.5 | 2.0% | Apr 25, 2024 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditi... |
| CVE-2024-20313 | HIGH | 7.4 | 0.3% | Apr 24, 2024 | A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent... |
| CVE-2024-4127 | HIGH | 8.8 | 1.8% | Apr 24, 2024 | A vulnerability was found in Tenda W15E 15.11.0.14. It has been classified as critical. Affected is the function guestWi... |
| CVE-2024-4126 | HIGH | 8.8 | 1.8% | Apr 24, 2024 | A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSy... |
| CVE-2024-20356 | HIGH | 8.7 | 32.5% | Apr 24, 2024 | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an aut... |
| CVE-2024-20295 | HIGH | 8.8 | 1.2% | Apr 24, 2024 | A vulnerability in the CLI of the Cisco Integrated Management Controller (IMC) could allow an authenticated, local attac... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now