2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-0637 | HIGH | 8.8 | 72.3% | Apr 1, 2024 | Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers t... |
| CVE-2024-28232 | HIGH | 7.5 | 0.6% | Apr 1, 2024 | Go package IceWhaleTech/CasaOS-UserService provides user management functionalities to CasaOS. The Casa OS Login page ha... |
| CVE-2024-30862 | HIGH | 8.8 | 0.7% | Apr 1, 2024 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php. |
| CVE-2024-30860 | HIGH | 8.8 | 0.6% | Apr 1, 2024 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php. |
| CVE-2024-30859 | HIGH | 8.8 | 0.7% | Apr 1, 2024 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php. |
| CVE-2024-21472 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption in Kernel while handling GPU operations. |
| CVE-2024-21470 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption while allocating memory for graphics. |
| CVE-2024-21468 | HIGH | 7.8 | 0.1% | Apr 1, 2024 | Memory corruption when there is failed unmap operation in GPU. |
| CVE-2024-21454 | HIGH | 7.5 | 0.4% | Apr 1, 2024 | Transient DOS while decoding the ToBeSignedMessage in Automotive Telematics. |
| CVE-2024-21453 | HIGH | 7.5 | 0.4% | Apr 1, 2024 | Transient DOS while decoding message of size that exceeds the available system memory. |
| CVE-2024-21452 | HIGH | 7.5 | 0.3% | Apr 1, 2024 | Transient DOS while decoding an ASN.1 OER message containing a SEQUENCE of unknown extensions. |
| CVE-2024-31099 | HIGH | 8.8 | 0.4% | Apr 1, 2024 | Missing Authorization vulnerability in Averta Shortcodes and extra features for Phlox theme auxin-elements.This issue af... |
| CVE-2024-30871 | HIGH | 8.8 | 0.7% | Apr 1, 2024 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php. |
| CVE-2024-30870 | HIGH | 8.8 | 0.7% | Apr 1, 2024 | netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php. |
| CVE-2024-26654 | HIGH | 7 | 0.3% | Apr 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: ALSA: sh: aica: reorder cleanup operations to avoid... |
| CVE-2024-26653 | HIGH | 7.8 | 0.2% | Apr 1, 2024 | In the Linux kernel, the following vulnerability has been resolved: usb: misc: ljca: Fix double free in error handling ... |
| CVE-2024-20053 | HIGH | 8.4 | 0.1% | Apr 1, 2024 | In flashc, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of ... |
| CVE-2024-20040 | HIGH | 8.8 | 0.2% | Apr 1, 2024 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote es... |
| CVE-2024-20039 | HIGH | 8.8 | 0.9% | Apr 1, 2024 | In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code... |
| CVE-2024-31103 | HIGH | 7.1 | 0.4% | Mar 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kanban for WordPre... |
| CVE-2024-31097 | HIGH | 7.1 | 0.4% | Mar 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stephan Spencer SE... |
| CVE-2024-31092 | HIGH | 7.1 | 0.4% | Mar 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Philip M. Hofer (F... |
| CVE-2024-31091 | HIGH | 7.1 | 0.4% | Mar 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SparkWeb Interacti... |
| CVE-2024-31090 | HIGH | 7.1 | 0.4% | Mar 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 荒野无灯 Hacklog Down ... |
| CVE-2024-31087 | HIGH | 7.1 | 0.4% | Mar 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Joel Starnes pageM... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now