2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10923 | HIGH | 8.6 | 0.3% | Nov 12, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ A... |
| CVE-2024-9420 | HIGH | 8.8 | 1.4% | Nov 12, 2024 | A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version... |
| CVE-2024-8495 | HIGH | 7.5 | 1.3% | Nov 12, 2024 | A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7... |
| CVE-2024-52297 | HIGH | 7.5 | 0.6% | Nov 12, 2024 | Tolgee is an open-source localization platform. Tolgee 3.81.1 included the all configuration properties in the PublicCon... |
| CVE-2024-52296 | MEDIUM | 6.5 | 0.3% | Nov 12, 2024 | libosdp is an implementation of IEC 60839-11-5 OSDP (Open Supervised Device Protocol) and provides a C library with supp... |
| CVE-2024-50331 | HIGH | 7.5 | 1.1% | Nov 12, 2024 | An out-of-bounds read vulnerability in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to leak se... |
| CVE-2024-50330 | CRITICAL | 9.8 | 40.5% | Nov 12, 2024 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allow... |
| CVE-2024-50329 | HIGH | 8.8 | 1.7% | Nov 12, 2024 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo... |
| CVE-2024-50328 | HIGH | 7.2 | 1.7% | Nov 12, 2024 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allow... |
| CVE-2024-50327 | HIGH | 7.2 | 1.0% | Nov 12, 2024 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allow... |
| CVE-2024-50326 | HIGH | 7.2 | 25.8% | Nov 12, 2024 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allow... |
| CVE-2024-50324 | HIGH | 7.2 | 18.2% | Nov 12, 2024 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo... |
| CVE-2024-50323 | HIGH | 7.8 | 0.7% | Nov 12, 2024 | SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allow... |
| CVE-2024-50322 | HIGH | 7.8 | 6.0% | Nov 12, 2024 | Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allo... |
| CVE-2024-50321 | HIGH | 7.5 | 1.1% | Nov 12, 2024 | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
| CVE-2024-50320 | HIGH | 7.5 | 31.2% | Nov 12, 2024 | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
| CVE-2024-50319 | HIGH | 7.5 | 1.1% | Nov 12, 2024 | An infinite loop in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial of service. |
| CVE-2024-50318 | HIGH | 7.5 | 1.1% | Nov 12, 2024 | A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial o... |
| CVE-2024-50317 | HIGH | 7.5 | 1.1% | Nov 12, 2024 | A null pointer dereference in Ivanti Avalanche before 6.4.6 allows a remote unauthenticated attacker to cause a denial o... |
| CVE-2024-47909 | MEDIUM | 4.9 | 1.1% | Nov 12, 2024 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 2... |
| CVE-2024-47907 | HIGH | 7.5 | 1.5% | Nov 12, 2024 | A stack-based buffer overflow in IPsec of Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated ... |
| CVE-2024-47906 | HIGH | 7.8 | 0.2% | Nov 12, 2024 | Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy... |
| CVE-2024-47905 | MEDIUM | 4.9 | 1.1% | Nov 12, 2024 | A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 2... |
| CVE-2024-47535 | MEDIUM | 5.5 | 0.4% | Nov 12, 2024 | Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performan... |
| CVE-2024-43415 | CRITICAL | 9 | 0.7% | Nov 12, 2024 | An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_aw... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now