2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-28101HIGH7.5The Apollo Router is a graph router written in Rust to run a federated supergraph that uses Apollo Federation. Versions ...
CVE-2024-27935HIGH8.3Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.35.1 and prior to version 1.36.3, a vul...
CVE-2024-27934HIGH8.8Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.36.2 and prior to version 1.40.3, use o...
CVE-2024-27933HIGH8.8Deno is a JavaScript, TypeScript, and WebAssembly runtime. In version 1.39.0, use of raw file descriptors in `op_node_ip...
CVE-2024-27923HIGH8.8Grav is a content management system (CMS). Prior to version 1.7.43, users who may write a page may use the `frontmatter`...
CVE-2024-27918HIGH8.2Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, a...
CVE-2024-27292HIGH7.5Docassemble is an expert system for guided interviews and document assembly. The vulnerability allows attackers to gain ...
CVE-2024-27094HIGH7.4OpenZeppelin Contracts is a library for secure smart contract development. The `Base64.encode` function encodes a `bytes...
CVE-2024-24813HIGH7.5Frappe is a full-stack web application framework. Prior to versions 14.64.0 and 15.0.0, SQL injection from a particular ...
CVE-2024-24520HIGH7.8An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languag...
CVE-2024-28916HIGH8.8Xbox Gaming Services Elevation of Privilege Vulnerability
CVE-2024-2469HIGH7.2An attacker with an Administrator role in GitHub Enterprise Server could gain SSH root access via remote code execution....
CVE-2024-2443HIGH7.2A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor rol...
CVE-2024-29032HIGH7.8Qiskit IBM Runtime is an environment that streamlines quantum computations and provides optimal implementations of the Q...
CVE-2024-29018HIGH7.5Moby is an open source container framework that is a key component of Docker Engine, Docker Desktop, and other distribut...
CVE-2024-28231HIGH7.5eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prio...
CVE-2024-23721HIGH7.5A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices. When sending a certain ...
CVE-2024-2711HIGH8.8A vulnerability was found in Tenda AC10U 15.03.06.48. It has been rated as critical. Affected by this issue is the funct...
CVE-2024-2710HIGH8.8A vulnerability was found in Tenda AC10U 15.03.06.49. It has been declared as critical. Affected by this vulnerability i...
CVE-2024-2709HIGH8.8A vulnerability was found in Tenda AC10U 15.03.06.49. It has been classified as critical. Affected is the function fromS...
CVE-2024-2708HIGH8.8A vulnerability was found in Tenda AC10U 15.03.06.49 and classified as critical. This issue affects the function formexe...
CVE-2024-2707HIGH8.8A vulnerability has been found in Tenda AC10U 15.03.06.49 and classified as critical. This vulnerability affects the fun...
CVE-2024-2706HIGH8.8A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.49. This affects the function formW...
CVE-2024-2705HIGH8.8A vulnerability, which was classified as critical, has been found in Tenda AC10U 1.0/15.03.06.49. Affected by this issue...
CVE-2024-2627HIGH8.8Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap c...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now