2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10978 | MEDIUM | 4.2 | 0.7% | Nov 14, 2024 | Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows ... |
| CVE-2024-10977 | LOW | 3.7 | 0.4% | Nov 14, 2024 | Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnis... |
| CVE-2024-10976 | MEDIUM | 5.4 | 0.8% | Nov 14, 2024 | Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows fro... |
| CVE-2024-7730 | HIGH | 7.8 | 0.3% | Nov 14, 2024 | A heap buffer overflow was found in the virtio-snd device in QEMU. When reading input audio in the virtio-snd input call... |
| CVE-2024-45670 | HIGH | 8.1 | 0.3% | Nov 14, 2024 | IBM Security SOAR 51.0.1.0 and earlier contains a mechanism for users to recover or change their passwords without knowi... |
| CVE-2024-45642 | MEDIUM | 5.3 | 0.5% | Nov 14, 2024 | IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arb... |
| CVE-2024-45099 | MEDIUM | 4.8 | 0.2% | Nov 14, 2024 | IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arb... |
| CVE-2024-3447 | MEDIUM | 6 | 0.6% | Nov 14, 2024 | A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_co... |
| CVE-2024-9693 | HIGH | 8.8 | 0.5% | Nov 14, 2024 | An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 pr... |
| CVE-2024-8180 | MEDIUM | 5.4 | 0.4% | Nov 14, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.3.7, 17.4 before 17.4.4, and 17.... |
| CVE-2024-10571 | CRITICAL | 9.8 | 4.8% | Nov 14, 2024 | The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, ... |
| CVE-2024-9472 | HIGH | 8.7 | 0.4% | Nov 14, 2024 | A null pointer dereference in Palo Alto Networks PAN-OS software on PA-800 Series, PA-3200 Series, PA-5200 Series, and P... |
| CVE-2024-5920 | MEDIUM | 4.8 | 0.3% | Nov 14, 2024 | A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Pan... |
| CVE-2024-5919 | MEDIUM | 6.5 | 0.3% | Nov 14, 2024 | A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authent... |
| CVE-2024-5918 | MEDIUM | 4.3 | 0.2% | Nov 14, 2024 | An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a... |
| CVE-2024-5917 | MEDIUM | 4.9 | 0.5% | Nov 14, 2024 | A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use... |
| CVE-2024-50306 | CRITICAL | 9.1 | 1.6% | Nov 14, 2024 | Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traff... |
| CVE-2024-50305 | HIGH | 7.5 | 0.9% | Nov 14, 2024 | Valid Host header field can cause Apache Traffic Server to crash on some platforms. This issue affects Apache Traffic S... |
| CVE-2024-47916 | HIGH | 7.5 | 0.5% | Nov 14, 2024 | Boa web server - CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2024-47915 | HIGH | 7.5 | 0.4% | Nov 14, 2024 | VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2024-47914 | MEDIUM | 4.5 | 0.2% | Nov 14, 2024 | VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF) |
| CVE-2024-45254 | HIGH | 7.5 | 0.4% | Nov 14, 2024 | VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-45253 | HIGH | 7.5 | 0.5% | Nov 14, 2024 | Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
| CVE-2024-38479 | HIGH | 7.5 | 0.9% | Nov 14, 2024 | Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 ... |
| CVE-2024-2552 | MEDIUM | 6 | 0.5% | Nov 14, 2024 | A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now