2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-24890 | HIGH | 7.8 | 1.1% | Mar 25, 2024 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ga... |
| CVE-2024-21505 | HIGH | 7.5 | 0.7% | Mar 25, 2024 | Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format a... |
| CVE-2024-1962 | HIGH | 8.8 | 0.5% | Mar 25, 2024 | The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attac... |
| CVE-2024-29071 | HIGH | 8.8 | 0.4% | Mar 25, 2024 | HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated at... |
| CVE-2024-28041 | HIGH | 8.8 | 0.6% | Mar 25, 2024 | HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary comm... |
| CVE-2024-29188 | HIGH | 7.9 | 0.2% | Mar 24, 2024 | WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action ... |
| CVE-2024-29187 | HIGH | 7.3 | 0.5% | Mar 24, 2024 | WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs... |
| CVE-2024-29194 | HIGH | 8.3 | 0.7% | Mar 24, 2024 | OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation o... |
| CVE-2024-30156 | HIGH | 7.5 | 3.7% | Mar 24, 2024 | Varnish Cache before 7.3.2 and 7.4.x before 7.4.3 (and before 6.0.13 LTS), and Varnish Enterprise 6 before 6.0.12r6, all... |
| CVE-2024-24725 | HIGH | 8.8 | 51.3% | Mar 23, 2024 | Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POS... |
| CVE-2024-23755 | HIGH | 8.8 | 1.1% | Mar 23, 2024 | ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is in... |
| CVE-2024-1603 | HIGH | 7.5 | 0.6% | Mar 23, 2024 | paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file. |
| CVE-2024-24832 | HIGH | 7.5 | 0.4% | Mar 23, 2024 | Missing Authorization vulnerability in Metagauss EventPrime.This issue affects EventPrime: from n/a through 3.3.9. |
| CVE-2024-2025 | HIGH | 8.8 | 0.8% | Mar 23, 2024 | The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable ... |
| CVE-2024-29059 | HIGH | 7.5 | 98.8% | Mar 23, 2024 | .NET Framework Information Disclosure Vulnerability |
| CVE-2024-29190 | HIGH | 7.5 | 0.7% | Mar 22, 2024 | Mobile Security Framework (MobSF) is a pen-testing, malware analysis and security assessment framework capable of perfor... |
| CVE-2024-2828 | HIGH | 8.8 | 0.6% | Mar 22, 2024 | A vulnerability, which was classified as critical, was found in lakernote EasyAdmin up to 20240315. Affected is the func... |
| CVE-2024-2827 | HIGH | 8.8 | 0.6% | Mar 22, 2024 | A vulnerability, which was classified as critical, has been found in lakernote EasyAdmin up to 20240315. This issue affe... |
| CVE-2024-2826 | HIGH | 8.8 | 0.6% | Mar 22, 2024 | A vulnerability classified as problematic was found in lakernote EasyAdmin up to 20240315. This vulnerability affects un... |
| CVE-2024-2825 | HIGH | 8.8 | 0.7% | Mar 22, 2024 | A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown par... |
| CVE-2024-29499 | HIGH | 7.4 | 0.3% | Mar 22, 2024 | Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2. |
| CVE-2024-29366 | HIGH | 8.8 | 2.4% | Mar 22, 2024 | A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware <= v1.01KRb03. |
| CVE-2024-29184 | HIGH | 8 | 0.9% | Mar 22, 2024 | FreeScout is a self-hosted help desk and shared mailbox. A Stored Cross-Site Scripting (XSS) vulnerability has been iden... |
| CVE-2024-2228 | HIGH | 8.8 | 0.4% | Mar 22, 2024 | This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user... |
| CVE-2024-2227 | HIGH | 7.5 | 0.8% | Mar 22, 2024 | This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulner... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now