2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52009 | CRITICAL | 9.8 | 0.7% | Nov 8, 2024 | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. Atlantis logs ... |
| CVE-2024-52007 | HIGH | 8.6 | 0.9% | Nov 8, 2024 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. XSLT parsing pe... |
| CVE-2024-52004 | HIGH | 8.7 | 0.7% | Nov 8, 2024 | MediaCMS is an open source video and media CMS, written in Python/Django and React, featuring a REST API. MediaCMS has b... |
| CVE-2024-52002 | HIGH | 8.8 | 0.6% | Nov 8, 2024 | Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Reques... |
| CVE-2024-52001 | MEDIUM | 4.3 | 0.3% | Nov 8, 2024 | Combodo iTop is a simple, web based IT Service Management tool. In affected versions portal users are able to access for... |
| CVE-2024-52000 | MEDIUM | 6.1 | 0.4% | Nov 8, 2024 | Combodo iTop is a simple, web based IT Service Management tool. Affected versions are subject to a reflected Cross-site ... |
| CVE-2024-35427 | MEDIUM | 5.5 | 0.2% | Nov 8, 2024 | vmir e8117 was discovered to contain a segmentation violation via the export_function function at /src/vmir_wasm_parser.... |
| CVE-2024-35426 | CRITICAL | 9.8 | 0.6% | Nov 8, 2024 | vmir e8117 was discovered to contain a stack overflow via the init_local_vars function at /src/vmir_wasm_parser.c. |
| CVE-2024-48073 | CRITICAL | 9.8 | 1.2% | Nov 8, 2024 | sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is ... |
| CVE-2024-35425 | MEDIUM | 5.5 | 0.2% | Nov 8, 2024 | vmir e8117 was discovered to contain a segmentation violation via the function_prepare_parse function at /src/vmir_funct... |
| CVE-2024-35424 | MEDIUM | 5.5 | 0.2% | Nov 8, 2024 | vmir e8117 was discovered to contain a segmentation violation via the import_function function at /src/vmir_wasm_parser.... |
| CVE-2024-35423 | HIGH | 7.8 | 0.3% | Nov 8, 2024 | vmir e8117 was discovered to contain a heap buffer overflow via the wasm_parse_section_functions function at /src/vmir_w... |
| CVE-2024-35422 | HIGH | 7.8 | 0.3% | Nov 8, 2024 | vmir e8117 was discovered to contain a heap buffer overflow via the wasm_call function at /src/vmir_wasm_parser.c. |
| CVE-2024-35421 | MEDIUM | 5.5 | 0.2% | Nov 8, 2024 | vmir e8117 was discovered to contain a segmentation violation via the wasm_parse_block function at /src/vmir_wasm_parser... |
| CVE-2024-35420 | MEDIUM | 6.2 | 0.2% | Nov 8, 2024 | wac commit 385e1 was discovered to contain a heap overflow. |
| CVE-2024-35419 | MEDIUM | 5.5 | 0.2% | Nov 8, 2024 | wac commit 385e1 was discovered to contain a heap overflow via the load_module function at /wac-asan/wa.c. This vulnerab... |
| CVE-2024-35418 | MEDIUM | 6.2 | 0.2% | Nov 8, 2024 | wac commit 385e1 was discovered to contain a heap overflow via the setup_call function at /wac-asan/wa.c. This vulnerabi... |
| CVE-2024-35410 | MEDIUM | 6.2 | 0.3% | Nov 8, 2024 | wac commit 385e1 was discovered to contain a heap overflow via the interpret function at /wac-asan/wa.c. This vulnerabil... |
| CVE-2024-27532 | HIGH | 7.5 | 0.5% | Nov 8, 2024 | wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) 06df58f is vulnerable to NULL Pointer Dereference in function... |
| CVE-2024-27530 | HIGH | 8.4 | 0.2% | Nov 8, 2024 | wasm3 139076a contains a Use-After-Free in ForEachModule. |
| CVE-2024-27529 | HIGH | 8.4 | 0.3% | Nov 8, 2024 | wasm3 139076a contains memory leaks in Read_utf8. |
| CVE-2024-27528 | HIGH | 8.4 | 0.2% | Nov 8, 2024 | wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution. |
| CVE-2024-27527 | HIGH | 7.5 | 0.4% | Nov 8, 2024 | wasm3 139076a is vulnerable to Denial of Service (DoS). |
| CVE-2024-11026 | HIGH | 7.4 | 0.6% | Nov 8, 2024 | A vulnerability was found in Intelligent Apps Freenow App 12.10.0 on Android. It has been rated as problematic. Affected... |
| CVE-2024-51157 | MEDIUM | 4.7 | 0.2% | Nov 8, 2024 | 07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component http://erp.07fly.net:80/... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now