2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31583 | HIGH | 7.8 | 0.3% | Apr 17, 2024 | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpre... |
| CVE-2024-31582 | HIGH | 7.8 | 0.3% | Apr 17, 2024 | FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function ... |
| CVE-2024-31041 | HIGH | 7.5 | 0.6% | Apr 17, 2024 | Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to c... |
| CVE-2024-31031 | HIGH | 7.5 | 0.9% | Apr 17, 2024 | An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leadin... |
| CVE-2024-2961 | HIGH | 7.3 | 88.3% | Apr 17, 2024 | The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4... |
| CVE-2024-30983 | HIGH | 7.3 | 0.3% | Apr 17, 2024 | SQL Injection vulnerability in phpgurukul Cyber Cafe Management System Using PHP & MySQL 1.0 allows attackers to run arb... |
| CVE-2024-28073 | HIGH | 7.2 | 1.1% | Apr 17, 2024 | SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability req... |
| CVE-2024-32463 | HIGH | 7.1 | 0.6% | Apr 17, 2024 | phlex is an open source framework for building object-oriented views in Ruby. There is a potential cross-site scripting ... |
| CVE-2024-32317 | HIGH | 7.5 | 0.4% | Apr 17, 2024 | Tenda AC10 v4.0 V16.03.10.13 and V16.03.10.20 firmware has a stack overflow vulnerability via the adslPwd parameter in t... |
| CVE-2024-32305 | HIGH | 8.8 | 0.6% | Apr 17, 2024 | Tenda A18 v15.03.05.05 firmware has a stack overflow vulnerability located via the PPW parameter in the fromWizardHandle... |
| CVE-2024-32303 | HIGH | 8 | 0.4% | Apr 17, 2024 | Tenda AC15 v15.03.20_multi, v15.03.05.19, and v15.03.05.18 firmware has a stack overflow vulnerability located via the P... |
| CVE-2024-26914 | HIGH | 7.8 | 0.2% | Apr 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix incorrect mpc_combine array si... |
| CVE-2024-26913 | HIGH | 7.8 | 0.3% | Apr 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix dcn35 8k30 Underflow/Corruptio... |
| CVE-2024-30253 | HIGH | 7.5 | 0.6% | Apr 17, 2024 | @solana/web3.js is the Solana JavaScript SDK. Using particular inputs with `@solana/web3.js` will result in memory exhau... |
| CVE-2024-32299 | HIGH | 8.8 | 0.8% | Apr 17, 2024 | Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function... |
| CVE-2024-32293 | HIGH | 8 | 5.6% | Apr 17, 2024 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the page parameter in the fromDhcpListCli... |
| CVE-2024-32292 | HIGH | 8.8 | 1.7% | Apr 17, 2024 | Tenda W30E v1.0 V1.0.1.25(633) firmware contains a command injection vulnerablility in the formexeCommand function via t... |
| CVE-2024-32291 | HIGH | 7.5 | 0.7% | Apr 17, 2024 | Tenda W30E v1.0 firmware v1.0.1.25(633) has a stack overflow vulnerability via the page parameter in the fromNatlimit fu... |
| CVE-2024-32285 | HIGH | 8 | 0.7% | Apr 17, 2024 | Tenda W30E v1.0 V1.0.1.25(633) firmware has a stack overflow vulnerability via the password parameter in the formaddUser... |
| CVE-2024-32283 | HIGH | 7.3 | 0.9% | Apr 17, 2024 | Tenda FH1203 V2.0.1.6 firmware has a command injection vulnerablility in formexeCommand function via the cmdinput parame... |
| CVE-2024-31578 | HIGH | 7.5 | 1.0% | Apr 17, 2024 | FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. |
| CVE-2024-2419 | HIGH | 7.1 | 0.5% | Apr 17, 2024 | A flaw was found in Keycloak's redirect_uri validation logic. This issue may allow a bypass of otherwise explicitly allo... |
| CVE-2024-1249 | HIGH | 7.4 | 0.4% | Apr 17, 2024 | A flaw was found in Keycloak's OIDC component in the "checkLoginIframe," which allows unvalidated cross-origin messages.... |
| CVE-2024-1132 | HIGH | 8.1 | 1.6% | Apr 17, 2024 | A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an... |
| CVE-2024-32310 | HIGH | 8 | 0.7% | Apr 17, 2024 | Tenda F1203 V2.0.1.6 firmware has a stack overflow vulnerability located in the PPW parameter of the fromWizardHandle fu... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now