2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22179 | HIGH | 8.7 | 0.4% | Apr 18, 2024 | The application is vulnerable to an unauthenticated parameter manipulation that allows an attacker to set the credentia... |
| CVE-2024-30920 | HIGH | 7.4 | 1.0% | Apr 18, 2024 | Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the... |
| CVE-2024-32477 | HIGH | 7.4 | 0.3% | Apr 18, 2024 | Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. By using ANSI escape sequences and a rac... |
| CVE-2024-20380 | HIGH | 7.5 | 1.1% | Apr 18, 2024 | A vulnerability in the HTML parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of servic... |
| CVE-2024-32462 | HIGH | 8.4 | 0.5% | Apr 18, 2024 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before ... |
| CVE-2024-24910 | HIGH | 7.3 | 0.2% | Apr 18, 2024 | A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for ... |
| CVE-2024-32475 | HIGH | 7.5 | 0.7% | Apr 18, 2024 | Envoy is a cloud-native, open source edge and service proxy. When an upstream TLS cluster is used with `auto_sni` enable... |
| CVE-2024-32602 | HIGH | 7.2 | 0.5% | Apr 18, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OnTheGoSystems Woo... |
| CVE-2024-32553 | HIGH | 7.1 | 0.5% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in looks_awesome Supe... |
| CVE-2024-32551 | HIGH | 7.6 | 0.5% | Apr 18, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Pro... |
| CVE-2024-32582 | HIGH | 7.1 | 0.3% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bowo Debug Log Man... |
| CVE-2024-32574 | HIGH | 7.1 | 0.4% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ashish Ajani WP Si... |
| CVE-2024-32570 | HIGH | 7.1 | 0.3% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Corners... |
| CVE-2024-32563 | HIGH | 7.1 | 0.4% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VikBooking Hotel B... |
| CVE-2024-32562 | HIGH | 8.6 | 0.5% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VIICTORY MEDIA LLC... |
| CVE-2024-32559 | HIGH | 7.1 | 0.4% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hwk-fr WP 404 Auto... |
| CVE-2024-32558 | HIGH | 7.1 | 0.4% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerc... |
| CVE-2024-32603 | HIGH | 8.8 | 0.5% | Apr 18, 2024 | Deserialization of Untrusted Data vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4... |
| CVE-2024-32595 | HIGH | 7.1 | 0.4% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mat Bao Corp WP He... |
| CVE-2024-32588 | HIGH | 7.1 | 0.5% | Apr 18, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPre... |
| CVE-2024-29001 | HIGH | 7.4 | 0.6% | Apr 18, 2024 | A SolarWinds Platform SWQL Injection Vulnerability was identified in the user interface. This vulnerability requires aut... |
| CVE-2024-32345 | HIGH | 7.2 | 0.5% | Apr 17, 2024 | A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary ... |
| CVE-2024-21989 | HIGH | 8.8 | 0.4% | Apr 17, 2024 | ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability ... |
| CVE-2024-3323 | HIGH | 8.3 | 0.4% | Apr 17, 2024 | Cross Site Scripting in UI Request/Response Validation in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows f... |
| CVE-2024-31583 | HIGH | 7.8 | 0.3% | Apr 17, 2024 | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpre... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now