2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11007 | HIGH | 7.2 | 1.7% | Nov 12, 2024 | Command injection in Ivanti Connect Secure before version 22.7R2.1 (Not Applicable to 9.1Rx) and Ivanti Policy Secure be... |
| CVE-2024-10971 | MEDIUM | 4.3 | 0.5% | Nov 12, 2024 | Improper access control in the Password History feature in Devolutions DVLS 2024.3.6 and earlier allows a malicious auth... |
| CVE-2024-8074 | CRITICAL | 9.3 | 0.4% | Nov 12, 2024 | Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows... |
| CVE-2024-51566 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | The NVMe driver queue processing is vulernable to guest-induced infinite loops. |
| CVE-2024-51565 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | The hda driver is vulnerable to a buffer over-read from a guest-controlled value. |
| CVE-2024-51564 | HIGH | 7.5 | 0.4% | Nov 12, 2024 | A guest can trigger an infinite loop in the hda audio driver. |
| CVE-2024-51563 | MEDIUM | 6.5 | 0.3% | Nov 12, 2024 | The virtio_vq_recordon function is subject to a time-of-check to time-of-use (TOCTOU) race condition. |
| CVE-2024-51562 | MEDIUM | 6.5 | 0.4% | Nov 12, 2024 | The NVMe driver function nvme_opc_get_log_page is vulnerable to a buffer over-read from a guest-controlled value. |
| CVE-2024-50386 | CRITICAL | 9.9 | 1.4% | Nov 12, 2024 | Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary... |
| CVE-2024-45289 | HIGH | 7.5 | 0.3% | Nov 12, 2024 | The fetch(3) library uses environment variables for passing certain information, including the revocation file pathname.... |
| CVE-2024-42442 | HIGH | 8.8 | 0.8% | Nov 12, 2024 | APTIOV contains a vulnerability in the BIOS where a user or attacker may cause an improper restriction of operations wit... |
| CVE-2024-39281 | MEDIUM | 5.3 | 0.4% | Nov 12, 2024 | The command ctl_persistent_reserve_out allows the caller to specify an arbitrary size which will be passed to the kernel... |
| CVE-2024-37365 | HIGH | 7.8 | 0.2% | Nov 12, 2024 | A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects wi... |
| CVE-2024-33660 | MEDIUM | 5.2 | 0.1% | Nov 12, 2024 | An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. |
| CVE-2024-33658 | HIGH | 7.8 | 0.2% | Nov 12, 2024 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bou... |
| CVE-2024-2315 | HIGH | 7.1 | 0.1% | Nov 12, 2024 | APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploita... |
| CVE-2024-11130 | MEDIUM | 4.8 | 0.3% | Nov 12, 2024 | A vulnerability was found in ZZCMS up to 2023. It has been rated as problematic. Affected by this issue is some unknown ... |
| CVE-2024-11127 | HIGH | 8.8 | 0.5% | Nov 12, 2024 | A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this... |
| CVE-2024-11126 | LOW | 3.1 | 0.3% | Nov 12, 2024 | A vulnerability was found in Digistar AG-30 Plus 2.6b. It has been classified as problematic. Affected is an unknown fun... |
| CVE-2024-11125 | MEDIUM | 4.3 | 0.4% | Nov 12, 2024 | A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processi... |
| CVE-2024-11124 | HIGH | 7.2 | 0.4% | Nov 12, 2024 | A vulnerability has been found in TimGeyssens UIOMatic 5 and classified as critical. This vulnerability affects unknown ... |
| CVE-2024-50572 | HIGH | 8.6 | 0.6% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
| CVE-2024-50561 | MEDIUM | 6.1 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
| CVE-2024-50560 | MEDIUM | 4.3 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
| CVE-2024-50559 | MEDIUM | 4.3 | 0.3% | Nov 12, 2024 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now