2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33212 | HIGH | 8.8 | 0.7% | Apr 23, 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 p... |
| CVE-2024-33211 | HIGH | 7.3 | 0.4% | Apr 23, 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPasswo... |
| CVE-2024-28130 | HIGH | 7.5 | 1.7% | Apr 23, 2024 | An incorrect type conversion vulnerability exists in the DVPSSoftcopyVOI_PList::createFromImage functionality of OFFIS D... |
| CVE-2024-28627 | HIGH | 7.5 | 0.4% | Apr 23, 2024 | An issue in Flipsnack v.18/03/2024 allows a local attacker to obtain sensitive information via the reader.gz.js file. |
| CVE-2024-2493 | HIGH | 7.5 | 0.3% | Apr 23, 2024 | Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops Center Analyzer: from 10.0... |
| CVE-2024-31077 | HIGH | 7.2 | 30.4% | Apr 23, 2024 | Forminator prior to 1.29.3 contains a SQL injection vulnerability. If this vulnerability is exploited, a remote authenti... |
| CVE-2024-3293 | HIGH | 8.8 | 1.4% | Apr 23, 2024 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to blind SQL Injection via the rtme... |
| CVE-2024-32656 | HIGH | 7.8 | 0.2% | Apr 22, 2024 | Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.... |
| CVE-2024-32480 | HIGH | 7.2 | 20.3% | Apr 22, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to S... |
| CVE-2024-32461 | HIGH | 8.8 | 19.1% | Apr 22, 2024 | LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injection vulnerability in POST /searc... |
| CVE-2024-32394 | HIGH | 8.8 | 12.6% | Apr 22, 2024 | An issue in ruijie.com/cn RG-RSR10-01G-T(WA)-S RSR_3.0(1)B9P2_RSR10-01G-TW-S_07150910 and RG-RSR10-01G-T(WA)-S RSR_3.0(1... |
| CVE-2024-32399 | HIGH | 7.6 | 3.2% | Apr 22, 2024 | Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensi... |
| CVE-2024-32407 | HIGH | 8.8 | 1.1% | Apr 22, 2024 | An issue in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to t... |
| CVE-2024-28699 | HIGH | 7.8 | 0.4% | Apr 22, 2024 | A buffer overflow vulnerability in pdf2json v0.70 allows a local attacker to execute arbitrary code via the GString::cop... |
| CVE-2024-32368 | HIGH | 7.3 | 0.3% | Apr 22, 2024 | Insecure Permission vulnerability in Agasta Sanketlife 2.0 Pocket 12-Lead ECG Monitor FW Version 3.0 allows a local atta... |
| CVE-2024-22811 | HIGH | 8.2 | 0.4% | Apr 22, 2024 | An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) b... |
| CVE-2024-22808 | HIGH | 7.5 | 0.5% | Apr 22, 2024 | An issue in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) b... |
| CVE-2024-32684 | HIGH | 7.5 | 0.4% | Apr 22, 2024 | Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through ... |
| CVE-2024-32682 | HIGH | 8.8 | 0.5% | Apr 22, 2024 | Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Ad... |
| CVE-2024-32681 | HIGH | 8.8 | 0.4% | Apr 22, 2024 | Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Ad... |
| CVE-2024-32695 | HIGH | 7.1 | 0.4% | Apr 22, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marco Gasi Languag... |
| CVE-2024-32694 | HIGH | 7.1 | 0.4% | Apr 22, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative interacti... |
| CVE-2024-32693 | HIGH | 7.6 | 0.2% | Apr 22, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in ValvePress Automatic.This issue affects Automatic: from n/a before 3.... |
| CVE-2024-4020 | HIGH | 8.8 | 1.6% | Apr 20, 2024 | A vulnerability was found in Tenda FH1206 1.2.0.8(8155) and classified as critical. This issue affects the function from... |
| CVE-2024-1480 | HIGH | 7.5 | 0.5% | Apr 19, 2024 | Unitronics Vision Standard line of controllers allow the Information Mode password to be retrieved without authenticatio... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now