2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25960 | HIGH | 7.8 | 0.1% | Mar 28, 2024 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of sensitive information vulner... |
| CVE-2024-25955 | HIGH | 8.8 | 1.4% | Mar 28, 2024 | Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could pot... |
| CVE-2024-25954 | HIGH | 7.5 | 0.6% | Mar 28, 2024 | Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A rem... |
| CVE-2024-25946 | HIGH | 8.8 | 1.4% | Mar 28, 2024 | Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability. An authorized attacker could pot... |
| CVE-2024-31139 | HIGH | 8.1 | 0.5% | Mar 28, 2024 | In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector |
| CVE-2024-31136 | HIGH | 7.4 | 0.5% | Mar 28, 2024 | In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter |
| CVE-2024-30612 | HIGH | 8.1 | 0.7% | Mar 28, 2024 | Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from for... |
| CVE-2024-30604 | HIGH | 7.5 | 0.7% | Mar 28, 2024 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function. |
| CVE-2024-30601 | HIGH | 8 | 0.7% | Mar 28, 2024 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function. |
| CVE-2024-30600 | HIGH | 8 | 0.7% | Mar 28, 2024 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function. |
| CVE-2024-30599 | HIGH | 8.8 | 0.7% | Mar 28, 2024 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function. |
| CVE-2024-0259 | HIGH | 7.3 | 0.3% | Mar 28, 2024 | Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low... |
| CVE-2024-30607 | HIGH | 8 | 0.7% | Mar 28, 2024 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function... |
| CVE-2024-30606 | HIGH | 8 | 0.7% | Mar 28, 2024 | Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the page parameter of the fromDhcpListClient function. |
| CVE-2024-30592 | HIGH | 8 | 0.7% | Mar 28, 2024 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the page parameter of the fromAddressNat function. |
| CVE-2024-30591 | HIGH | 8.8 | 0.7% | Mar 28, 2024 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo functi... |
| CVE-2024-30583 | HIGH | 8 | 0.7% | Mar 28, 2024 | Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat funct... |
| CVE-2024-28109 | HIGH | 8.1 | 1.0% | Mar 28, 2024 | veraPDF-library is a PDF/A validation library. Executing policy checks using custom schematron files invokes an XSL tran... |
| CVE-2024-29896 | HIGH | 7.5 | 0.6% | Mar 28, 2024 | Astro-Shield is a library to compute the subresource integrity hashes for your JS scripts and CSS stylesheets. When auto... |
| CVE-2024-27775 | HIGH | 7.2 | 0.6% | Mar 28, 2024 | SysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's ... |
| CVE-2024-29229 | HIGH | 7.7 | 0.8% | Mar 28, 2024 | Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-92... |
| CVE-2024-29228 | HIGH | 7.7 | 0.8% | Mar 28, 2024 | Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289... |
| CVE-2024-28002 | HIGH | 7.1 | 0.4% | Mar 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Corners... |
| CVE-2024-28001 | HIGH | 7.1 | 0.4% | Mar 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Favicon... |
| CVE-2024-27999 | HIGH | 7.1 | 0.4% | Mar 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digamber Pradhan P... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now