2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-31256HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebinarPress allow...
CVE-2024-31255HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ELEXtensions ELEX ...
CVE-2024-31241HIGH7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ThimPress LearnPre...
CVE-2024-31234HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam REHub Framew...
CVE-2024-31233HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sizam Rehub.This i...
CVE-2024-30418HIGH7.5Vulnerability of insufficient permission verification in the app management module. Impact: Successful exploitation of t...
CVE-2024-30417HIGH7.5Path traversal vulnerability in the Bluetooth-based sharing module. Impact: Successful exploitation of this vulnerabilit...
CVE-2024-30416HIGH7.5Use After Free (UAF) vulnerability in the underlying driver module. Impact: Successful exploitation of this vulnerabilit...
CVE-2024-30414HIGH7.5Command injection vulnerability in the AccountManager module. Impact: Successful exploitation of this vulnerability may ...
CVE-2024-30413HIGH7.5Vulnerability of improper permission control in the window management module. Impact: Successful exploitation of this vu...
CVE-2024-28741HIGH8.8Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code ...
CVE-2024-27620HIGH7.5An issue in Ladder v.0.0.1 thru v.0.0.21 allows a remote attacker to obtain sensitive information via a crafted request ...
CVE-2024-0406HIGH7.8A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file...
CVE-2024-3159HIGH8.8Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrar...
CVE-2024-3158HIGH8.8Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit he...
CVE-2024-3156HIGH8.8Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially per...
CVE-2024-24746HIGH7.5Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache NimBLE.  Specially crafted GATT operatio...
CVE-2024-22328HIGH7.5IBM Maximo Application Suite 8.10 and 8.11 could allow a remote attacker to traverse directories on the system. An attac...
CVE-2024-3369HIGH8.8A vulnerability, which was classified as critical, has been found in code-projects Car Rental 1.0. Affected by this issu...
CVE-2024-3362HIGH8.8A vulnerability was found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this issue...
CVE-2024-3361HIGH8.8A vulnerability has been found in SourceCodester Online Library System 1.0 and classified as critical. Affected by this ...
CVE-2024-1385HIGH7.1The WP-Stateless – Google Cloud Storage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing...
CVE-2024-30977HIGH7.8An issue in Secnet Security Network Intelligent AC Management System v.1.02.040 allows a local attacker to escalate priv...
CVE-2024-27912HIGH7.5A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device ...
CVE-2024-27911HIGH7.5A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administ...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now