2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-24335HIGH8.4A heap buffer overflow occurs in the dfs_v2 romfs filesystem RT-Thread through 5.0.2.
CVE-2024-24334HIGH8.4A heap buffer overflow occurs in dfs_v2 dfs_file in RT-Thread through 5.0.2.
CVE-2024-0400HIGH7.5SCM Software is a client and server application. An Authenticated System manager client can execute LINQ query in the SC...
CVE-2024-1531HIGH8.2A vulnerability exists in the stb-language file handling that affects the RTU500 series product versions listed below. A...
CVE-2024-2932HIGH7.5A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unkno...
CVE-2024-26577HIGH7.5VSeeFace through 1.13.38.c2 allows attackers to cause a denial of service (application hang) via a spoofed UDP packet co...
CVE-2024-25136HIGH7.5 There is a function in AutomationDirect C-MORE EA9 HMI that allows an attacker to send a relative path in the URL witho...
CVE-2024-2910HIGH8.8A vulnerability, which was classified as critical, has been found in Ruijie RG-EG350 up to 20240318. Affected by this is...
CVE-2024-2909HIGH8.8A vulnerability classified as critical was found in Ruijie RG-EG350 up to 20240318. Affected by this vulnerability is th...
CVE-2024-2903HIGH8.8A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function GetPare...
CVE-2024-2887HIGH7.7Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary cod...
CVE-2024-2886HIGH7.5Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/...
CVE-2024-2885HIGH8.8Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap cor...
CVE-2024-2883HIGH8.8Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap co...
CVE-2024-28551HIGH7.5Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the ssid parameter of form_fast_setting_wifi_set function.
CVE-2024-27521HIGH8TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote command execution (RCE) vuln...
CVE-2024-25420HIGH7.2An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authoriz...
CVE-2024-2955HIGH7.5T.38 dissector crash in Wireshark 4.2.0 to 4.0.3 and 4.0.0 to 4.0.13 allows denial of service via packet injection or cr...
CVE-2024-2902HIGH8.8A vulnerability was found in Tenda AC7 15.03.06.44 and classified as critical. This issue affects the function fromSetWi...
CVE-2024-2901HIGH8.8A vulnerability has been found in Tenda AC7 15.03.06.44 and classified as critical. This vulnerability affects the funct...
CVE-2024-2900HIGH8.8A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. This affects the function savePar...
CVE-2024-28442HIGH7.5Directory Traversal vulnerability in Yealink VP59 v.91.15.0.118 allows a physically proximate attacker to obtain sensiti...
CVE-2024-2899HIGH8.8A vulnerability, which was classified as critical, has been found in Tenda AC7 15.03.06.44. Affected by this issue is th...
CVE-2024-2898HIGH8.8A vulnerability classified as critical was found in Tenda AC7 15.03.06.44. Affected by this vulnerability is the functio...
CVE-2024-2897HIGH8.8A vulnerability classified as critical has been found in Tenda AC7 15.03.06.44. Affected is the function formWriteFacMac...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now