2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-31978HIGH7.6A vulnerability has been identified in SINEC NMS (All versions < V2.0 SP2). Affected devices allow authenticated users t...
CVE-2024-31370HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CodeIsAwesome AIKi...
CVE-2024-31367HIGH7.1Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.
CVE-2024-30191HIGH8.4A vulnerability has been identified in SCALANCE W1748-1 M12 (6GK5748-1GY01-0AA0), SCALANCE W1748-1 M12 (6GK5748-1GY01-0T...
CVE-2024-26275HIGH7.8A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Pa...
CVE-2024-31366HIGH7.1Missing Authorization vulnerability in Themify Post Type Builder (PTB).This issue affects Post Type Builder (PTB): from ...
CVE-2024-31365HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themify Post Type ...
CVE-2024-1233HIGH7.3A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP reques...
CVE-2024-2975HIGH7.5A race condition was identified through which privilege escalation was possible in certain configurations.
CVE-2024-27983HIGH8.2An attacker can make the Node.js HTTP/2 server completely unavailable by sending a small amount of HTTP/2 frames packets...
CVE-2024-27901HIGH7.2SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provi...
CVE-2024-27899HIGH8.8Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper sec...
CVE-2024-23084HIGH7.5Apfloat v1.10.1 was discovered to contain an ArrayIndexOutOfBoundsException via the component org.apfloat.internal.Doubl...
CVE-2024-27632HIGH8.8An issue in GNU Savane v.3.12 and before allows a remote attacker to escalate privileges via the form_id in the form_hea...
CVE-2024-0082HIGH8.2NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management...
CVE-2024-3466HIGH8.8A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. Affected by...
CVE-2024-27630HIGH7.5Insecure Direct Object Reference (IDOR) in GNU Savane v.3.12 and before allows a remote attacker to delete arbitrary fil...
CVE-2024-24279HIGH8.8An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attacker...
CVE-2024-23085HIGH7.5Apfloat v1.10.1 was discovered to contain a NullPointerException via the component org.apfloat.internal.DoubleScramble::...
CVE-2024-28270HIGH8.1An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request t...
CVE-2024-31442HIGH8.8Redon Hub is a Roblox Product Delivery Bot, also known as a Hub. In all hubs before version 1.0.2, all commands are capa...
CVE-2024-3442HIGH8.8A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an un...
CVE-2024-3441HIGH8.8A vulnerability was found in SourceCodester Prison Management System 1.0. It has been rated as critical. Affected by thi...
CVE-2024-3440HIGH7.2A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. Affected by ...
CVE-2024-28732HIGH7.5An issue was discovered in OFPMatch in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a deni...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now