2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-3353 | HIGH | 7.3 | 0.8% | Apr 5, 2024 | A vulnerability was found in SourceCodester Aplaya Beach Resort Online Reservation System 1.0 and classified as critical... |
| CVE-2024-29757 | HIGH | 7.3 | 0.1% | Apr 5, 2024 | there is a possible permission bypass due to Debug certs being allowlisted. This could lead to local escalation of privi... |
| CVE-2024-29753 | HIGH | 7.7 | 0.1% | Apr 5, 2024 | In tmu_set_control_temp_step of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could... |
| CVE-2024-29752 | HIGH | 7.8 | 0.1% | Apr 5, 2024 | In tmu_set_tr_num_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could... |
| CVE-2024-29749 | HIGH | 8.4 | 0.1% | Apr 5, 2024 | In tmu_set_tr_thresholds of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lea... |
| CVE-2024-29748 | HIGH | 7.8 | 0.7% | Apr 5, 2024 | there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege wi... |
| CVE-2024-29746 | HIGH | 8.4 | 0.1% | Apr 5, 2024 | In lpm_req_handler of lpm.c, there is a possible out of bounds write due to improper input validation. This could lead t... |
| CVE-2024-29743 | HIGH | 7.7 | 0.1% | Apr 5, 2024 | In tmu_set_temp_lut of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to ... |
| CVE-2024-29741 | HIGH | 7.8 | 0.1% | Apr 5, 2024 | In pblS2mpuResume of s2mpu.c, there is a possible mitigation bypass due to a logic error in the code. This could lead to... |
| CVE-2024-29740 | HIGH | 7.4 | 0.1% | Apr 5, 2024 | In tmu_set_table of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to loc... |
| CVE-2024-0081 | HIGH | 7.5 | 0.6% | Apr 5, 2024 | NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation... |
| CVE-2024-31851 | HIGH | 8.6 | 2.9% | Apr 5, 2024 | A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8843 when running using the embedded Jett... |
| CVE-2024-31850 | HIGH | 8.6 | 3.0% | Apr 5, 2024 | A path traversal vulnerability exists in the Java version of CData Arc < 23.4.8839 when running using the embedded Jetty... |
| CVE-2024-22004 | HIGH | 7.7 | 0.2% | Apr 5, 2024 | Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability... |
| CVE-2024-31220 | HIGH | 7.3 | 0.5% | Apr 5, 2024 | Sunshine is a self-hosted game stream host for Moonlight. Starting in version 0.16.0 and prior to version 0.18.0, an att... |
| CVE-2024-31083 | HIGH | 7.8 | 1.8% | Apr 5, 2024 | A use-after-free vulnerability was found in the ProcRenderAddGlyphs() function of Xorg servers. This issue occurs when A... |
| CVE-2024-26810 | HIGH | 7.8 | 0.2% | Apr 5, 2024 | In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask oper... |
| CVE-2024-3217 | HIGH | 8.8 | 1.9% | Apr 5, 2024 | The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'attribute_value' and 'attribute_id' pa... |
| CVE-2024-30891 | HIGH | 8.8 | 1.9% | Apr 5, 2024 | A command injection vulnerability exists in /goform/exeCommand in Tenda AC18 v15.03.05.05, which allows attackers to con... |
| CVE-2024-2115 | HIGH | 8.8 | 0.3% | Apr 5, 2024 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions u... |
| CVE-2024-29863 | HIGH | 7.8 | 0.4% | Apr 5, 2024 | A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR... |
| CVE-2024-29672 | HIGH | 8.8 | 1.3% | Apr 5, 2024 | Directory Traversal vulnerability in zly2006 Reden before v.0.2.514 allows a remote attacker to execute arbitrary code v... |
| CVE-2024-22363 | HIGH | 7.5 | 0.8% | Apr 5, 2024 | SheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS). |
| CVE-2024-31498 | HIGH | 8.8 | 0.6% | Apr 4, 2024 | Yubico ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows, when Edge is not used, allows privilege escalation b... |
| CVE-2024-31212 | HIGH | 7.2 | 0.9% | Apr 4, 2024 | InstantCMS is a free and open source content management system. A SQL injection vulnerability affects instantcms v2.16.2... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now