2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2759 | HIGH | 7.5 | 0.6% | Apr 4, 2024 | Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates... |
| CVE-2024-2700 | HIGH | 7 | 0.3% | Apr 4, 2024 | A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus n... |
| CVE-2024-27575 | HIGH | 7.5 | 0.8% | Apr 4, 2024 | INOTEC Sicherheitstechnik WebServer CPS220/64 3.3.19 allows a remote attacker to read arbitrary files via absolute path ... |
| CVE-2024-26808 | HIGH | 7.8 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_chain_filter: handle NETDEV_UNREGIST... |
| CVE-2024-26804 | HIGH | 7.8 | 0.7% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth ... |
| CVE-2024-26800 | HIGH | 7.8 | 0.3% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryptio... |
| CVE-2024-26799 | HIGH | 7 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix uninitialized pointer dmactl In th... |
| CVE-2024-26797 | HIGH | 7.8 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Prevent potential buffer overflow ... |
| CVE-2024-26793 | HIGH | 7.8 | 0.3% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtp_n... |
| CVE-2024-26792 | HIGH | 7.8 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of anonymous device after sn... |
| CVE-2024-26791 | HIGH | 7.1 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: dev-replace: properly validate device names ... |
| CVE-2024-26789 | HIGH | 7.8 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: crypto: arm64/neonbs - fix out-of-bounds access on ... |
| CVE-2024-26786 | HIGH | 7.8 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix iopt_access_list_id overwrite bug Syz... |
| CVE-2024-26782 | HIGH | 7.8 | 0.2% | Apr 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MP... |
| CVE-2024-30565 | HIGH | 8.8 | 1.6% | Apr 4, 2024 | An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php. |
| CVE-2024-29007 | HIGH | 7.3 | 0.8% | Apr 4, 2024 | The CloudStack management server and secondary storage VM could be tricked into making requests to restricted or random ... |
| CVE-2024-31025 | HIGH | 7.5 | 0.6% | Apr 4, 2024 | SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php co... |
| CVE-2024-2008 | HIGH | 8.8 | 0.9% | Apr 4, 2024 | The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Inje... |
| CVE-2024-3022 | HIGH | 7.2 | 1.6% | Apr 4, 2024 | The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient filename validation in... |
| CVE-2024-29167 | HIGH | 7.2 | 0.7% | Apr 4, 2024 | SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execu... |
| CVE-2024-26258 | HIGH | 7.1 | 0.7% | Apr 4, 2024 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with credentials to... |
| CVE-2024-25568 | HIGH | 8.8 | 1.1% | Apr 4, 2024 | OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent unauthenticated attacker to ... |
| CVE-2024-30265 | HIGH | 7.5 | 0.7% | Apr 3, 2024 | Collabora Online is a collaborative online office suite based on LibreOffice technology. Any deployment of voilà dashboa... |
| CVE-2024-28870 | HIGH | 7.5 | 0.6% | Apr 3, 2024 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine dev... |
| CVE-2024-27705 | HIGH | 7.6 | 0.6% | Apr 3, 2024 | Cross Site Scripting vulnerability in Leantime v3.0.6 allows attackers to execute arbitrary code via upload of crafted P... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now