2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31210 | HIGH | 8.8 | 0.9% | Apr 4, 2024 | WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be sub... |
| CVE-2024-31206 | HIGH | 8.2 | 0.3% | Apr 4, 2024 | dectalk-tts is a Node package to interact with the aeiou Dectalk web API. In `dectalk-tts@1.0.0`, network requests to th... |
| CVE-2024-3316 | HIGH | 8.8 | 0.6% | Apr 4, 2024 | A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical.... |
| CVE-2024-3311 | HIGH | 8.8 | 1.0% | Apr 4, 2024 | A vulnerability was found in Dreamer CMS up to 4.1.3.0. It has been declared as critical. Affected by this vulnerability... |
| CVE-2024-30255 | HIGH | 7.5 | 87.8% | Apr 4, 2024 | Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3... |
| CVE-2024-29387 | HIGH | 8.8 | 1.2% | Apr 4, 2024 | projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/pri... |
| CVE-2024-27316 | HIGH | 7.5 | 91.3% | Apr 4, 2024 | HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP... |
| CVE-2024-22053 | HIGH | 8.2 | 3.5% | Apr 4, 2024 | A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an... |
| CVE-2024-22052 | HIGH | 7.5 | 3.8% | Apr 4, 2024 | A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secur... |
| CVE-2024-30249 | HIGH | 8.6 | 0.6% | Apr 4, 2024 | Cloudburst Network provides network components used within Cloudburst projects. A vulnerability in versions prior to `1.... |
| CVE-2024-25007 | HIGH | 7.1 | 0.4% | Apr 4, 2024 | Ericsson Network Manager (ENM), versions prior to 23.1, contains a vulnerability in the export function of application ... |
| CVE-2024-29192 | HIGH | 8.8 | 0.5% | Apr 4, 2024 | gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to Cross-Site Request Forgery. The `/... |
| CVE-2024-27268 | HIGH | 7.5 | 1.3% | Apr 4, 2024 | IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sendi... |
| CVE-2024-25699 | HIGH | 8.5 | 0.7% | Apr 4, 2024 | There is a difficult‑to‑exploit improper authentication issue in the Home application for Esri Portal for ArcGIS version... |
| CVE-2024-25695 | HIGH | 7.2 | 0.5% | Apr 4, 2024 | There is a Cross-site Scripting vulnerability in Portal for ArcGIS in versions 11.2 and below that may allow a remote, a... |
| CVE-2024-30263 | HIGH | 7.7 | 0.5% | Apr 4, 2024 | macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF a... |
| CVE-2024-3299 | HIGH | 7.8 | 0.4% | Apr 4, 2024 | Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedur... |
| CVE-2024-3298 | HIGH | 7.8 | 0.3% | Apr 4, 2024 | Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOL... |
| CVE-2024-30250 | HIGH | 7.5 | 0.3% | Apr 4, 2024 | Astro-Shield is an integration to enhance website security with SubResource Integrity hashes, Content-Security-Policy he... |
| CVE-2024-28871 | HIGH | 7.5 | 0.8% | Apr 4, 2024 | LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malfor... |
| CVE-2024-27919 | HIGH | 7.5 | 86.7% | Apr 4, 2024 | Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol sta... |
| CVE-2024-22189 | HIGH | 7.5 | 1.1% | Apr 4, 2024 | quic-go is an implementation of the QUIC protocol in Go. Prior to version 0.42.0, an attacker can cause its peer to run ... |
| CVE-2024-31082 | HIGH | 7.3 | 0.3% | Apr 4, 2024 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcAppleDRICreatePixmap() function. This is... |
| CVE-2024-31081 | HIGH | 7.3 | 0.5% | Apr 4, 2024 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This iss... |
| CVE-2024-31080 | HIGH | 7.3 | 0.5% | Apr 4, 2024 | A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This iss... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now