2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30343 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2024-30342 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2024-30341 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote att... |
| CVE-2024-30339 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers... |
| CVE-2024-30338 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attacke... |
| CVE-2024-30337 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers... |
| CVE-2024-30336 | HIGH | 7.8 | 0.8% | Apr 2, 2024 | Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers... |
| CVE-2024-31109 | HIGH | 7.1 | 0.2% | Apr 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Toastie Studio Woocommerce Social Media Share Buttons allows Stored X... |
| CVE-2024-31105 | HIGH | 7.1 | 0.2% | Apr 2, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Adam Bowen Tax Rate Upload allows Reflected XSS.This issue affects Ta... |
| CVE-2024-30809 | HIGH | 7.5 | 0.7% | Apr 2, 2024 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in Ap4Sample.h in AP4_Sample::Ge... |
| CVE-2024-30807 | HIGH | 7.5 | 0.7% | Apr 2, 2024 | An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_Unknown... |
| CVE-2024-30335 | HIGH | 7.1 | 0.7% | Apr 2, 2024 | Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows ... |
| CVE-2024-28287 | HIGH | 7.3 | 0.4% | Apr 2, 2024 | A DOM-based open redirection in the returnUrl parameter of INSTINCT UI Web Client 6.5.0 allows attackers to redirect use... |
| CVE-2024-22248 | HIGH | 7.1 | 0.4% | Apr 2, 2024 | VMware SD-WAN Orchestrator contains an open redirect vulnerability. A malicious actor may be able to redirect a victim ... |
| CVE-2024-22246 | HIGH | 7.4 | 0.4% | Apr 2, 2024 | VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execut... |
| CVE-2024-30248 | HIGH | 7.7 | 0.5% | Apr 2, 2024 | Piccolo Admin is an admin interface/content management system for Python, built on top of Piccolo. Piccolo's admin panel... |
| CVE-2024-30965 | HIGH | 8.8 | 0.4% | Apr 2, 2024 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /src/dede/member_scores.php... |
| CVE-2024-29514 | HIGH | 8.8 | 1.3% | Apr 2, 2024 | File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via upload... |
| CVE-2024-29949 | HIGH | 7.2 | 1.3% | Apr 2, 2024 | There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administr... |
| CVE-2024-31005 | HIGH | 8.1 | 1.2% | Apr 2, 2024 | An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_Mdhd... |
| CVE-2024-31003 | HIGH | 8.8 | 1.5% | Apr 2, 2024 | Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4... |
| CVE-2024-29074 | HIGH | 8.8 | 0.2% | Apr 2, 2024 | in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper in... |
| CVE-2024-28951 | HIGH | 7.8 | 0.2% | Apr 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through u... |
| CVE-2024-28226 | HIGH | 7.5 | 0.6% | Apr 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input. |
| CVE-2024-26674 | HIGH | 7.1 | 0.3% | Apr 2, 2024 | In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now