2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-27976 | HIGH | 8.8 | 3.2% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-27975 | HIGH | 8.8 | 2.6% | Apr 19, 2024 | An Use-after-free vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows a remote authent... |
| CVE-2024-25000 | HIGH | 8.8 | 3.0% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-24999 | HIGH | 8.8 | 2.9% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-24998 | HIGH | 8.8 | 3.2% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-24997 | HIGH | 8.8 | 3.2% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-24995 | HIGH | 7.5 | 2.4% | Apr 19, 2024 | A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated ... |
| CVE-2024-24994 | HIGH | 8.8 | 68.1% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-24993 | HIGH | 7.5 | 2.4% | Apr 19, 2024 | A Race Condition (TOCTOU) vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated ... |
| CVE-2024-24992 | HIGH | 8.8 | 70.9% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-23535 | HIGH | 8.8 | 68.1% | Apr 19, 2024 | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker ... |
| CVE-2024-23534 | HIGH | 8.8 | 2.7% | Apr 19, 2024 | An Unrestricted File-upload vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticate... |
| CVE-2024-23532 | HIGH | 7.5 | 1.8% | Apr 19, 2024 | An out-of-bounds Read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3 allows an authentic... |
| CVE-2024-23531 | HIGH | 7.5 | 2.4% | Apr 19, 2024 | An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthentica... |
| CVE-2024-23530 | HIGH | 7.5 | 1.9% | Apr 19, 2024 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditi... |
| CVE-2024-23529 | HIGH | 7.5 | 1.9% | Apr 19, 2024 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditi... |
| CVE-2024-23528 | HIGH | 7.5 | 1.9% | Apr 19, 2024 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditi... |
| CVE-2024-23526 | HIGH | 7.5 | 1.9% | Apr 19, 2024 | An out-of-bounds read vulnerability in WLAvalancheService component of Ivanti Avalanche before 6.4.3, in certain conditi... |
| CVE-2024-3742 | HIGH | 8.7 | 1.4% | Apr 18, 2024 | Electrolink transmitters store credentials in clear-text. Use of these credentials could allow an attacker to access the... |
| CVE-2024-22186 | HIGH | 8.8 | 0.5% | Apr 18, 2024 | The application suffers from a privilege escalation vulnerability. An attacker logged in as guest can escalate his priv... |
| CVE-2024-21872 | HIGH | 8.7 | 0.6% | Apr 18, 2024 | The device allows an unauthenticated attacker to bypass authentication and modify the cookie to reveal hidden pages tha... |
| CVE-2024-1491 | HIGH | 8.7 | 0.6% | Apr 18, 2024 | The devices allow access to an unprotected endpoint that allows MPFS file system binary image upload without authentica... |
| CVE-2024-3741 | HIGH | 8.7 | 0.5% | Apr 18, 2024 | Electrolink transmitters are vulnerable to an authentication bypass vulnerability affecting the login cookie. An attack... |
| CVE-2024-30929 | HIGH | 8 | 1.0% | Apr 18, 2024 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the 'back' ... |
| CVE-2024-30928 | HIGH | 8.1 | 0.7% | Apr 18, 2024 | SQL Injection vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary SQL commands via 'classids'... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now