2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-26836 | HIGH | 7.8 | 0.2% | Apr 17, 2024 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Fix password opcode orderi... |
| CVE-2024-32546 | HIGH | 7.1 | 0.4% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adam Bowen Tax Rat... |
| CVE-2024-32545 | HIGH | 7.1 | 0.3% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Canva Canva – Desi... |
| CVE-2024-32544 | HIGH | 7.1 | 0.4% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Netgsm allows Refl... |
| CVE-2024-32543 | HIGH | 7.1 | 0.4% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Minoji MJ Update H... |
| CVE-2024-32542 | HIGH | 7.1 | 0.3% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Organic Themes Bul... |
| CVE-2024-32541 | HIGH | 7.1 | 0.3% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tobias Battenberg ... |
| CVE-2024-32535 | HIGH | 7.1 | 0.3% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jojaba Access Cate... |
| CVE-2024-32533 | HIGH | 7.1 | 0.4% | Apr 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Peter Shaw LH Add ... |
| CVE-2024-3840 | HIGH | 7.5 | 0.7% | Apr 17, 2024 | Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to b... |
| CVE-2024-3837 | HIGH | 8.8 | 0.9% | Apr 17, 2024 | Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the rendere... |
| CVE-2024-3834 | HIGH | 8.8 | 1.0% | Apr 17, 2024 | Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit hea... |
| CVE-2024-3833 | HIGH | 8.8 | 15.0% | Apr 17, 2024 | Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploi... |
| CVE-2024-3832 | HIGH | 8.8 | 1.2% | Apr 17, 2024 | Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object ... |
| CVE-2024-32550 | HIGH | 7.1 | 0.2% | Apr 17, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in BMI Adult & Kid Calculator allows Stored XSS.This issue affects BMI A... |
| CVE-2024-32549 | HIGH | 7.1 | 0.2% | Apr 17, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Microkid Related Posts for WordPress allows Cross-Site Scripting (XSS... |
| CVE-2024-22354 | HIGH | 7 | 0.6% | Apr 17, 2024 | IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.5 are vul... |
| CVE-2024-31680 | HIGH | 8.8 | 0.8% | Apr 17, 2024 | File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a loc... |
| CVE-2024-31503 | HIGH | 7.5 | 0.3% | Apr 17, 2024 | Incorrect access control in Dolibarr ERP CRM versions 19.0.0 and before, allows authenticated attackers to steal victim ... |
| CVE-2024-31759 | HIGH | 8.8 | 0.9% | Apr 16, 2024 | An issue in sanluan PublicCMS v.4.0.202302.e allows an attacker to escalate privileges via the change password function. |
| CVE-2024-31887 | HIGH | 7.5 | 0.5% | Apr 16, 2024 | IBM Security Verify Privilege 11.6.25 could allow an unauthenticated actor to obtain sensitive information from the SOAP... |
| CVE-2024-21116 | HIGH | 7.8 | 0.4% | Apr 16, 2024 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a... |
| CVE-2024-21115 | HIGH | 8.8 | 0.5% | Apr 16, 2024 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a... |
| CVE-2024-21114 | HIGH | 8.8 | 0.4% | Apr 16, 2024 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a... |
| CVE-2024-21113 | HIGH | 8.8 | 0.4% | Apr 16, 2024 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now