2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-50147MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix command bitmask initialization Comma...
CVE-2024-50146MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't call cleanup on profile rollback f...
CVE-2024-50145MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Add SKB allocation failures handling in ...
CVE-2024-50144MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: fix unbalanced rpm put() with fence_fini() ...
CVE-2024-50143HIGH7.8In the Linux kernel, the following vulnerability has been resolved: udf: fix uninit-value use in udf_get_fileshortad C...
CVE-2024-50142MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family w...
CVE-2024-50141MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM ha...
CVE-2024-50140MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: sched/core: Disable page allocation in task_tick_mm...
CVE-2024-50139MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix shift-out-of-bounds bug Fix a shif...
CVE-2024-10203HIGH7.8Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrar...
CVE-2024-30142LOW3.8HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be sto...
CVE-2024-30141MEDIUM4.7HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed erro...
CVE-2024-30140MEDIUM5.4HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attac...
CVE-2024-38286HIGH7.5Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: ...
CVE-2024-10027MEDIUM4.8The WP Booking Calendar WordPress plugin before 10.6.3 does not sanitise and escape some of its Widgets settings, which ...
CVE-2024-10947HIGH7.2A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cl...
CVE-2024-10946HIGH7.2A vulnerability classified as critical has been found in Guangzhou Tuchuang Computer Software Development Interlib Libra...
CVE-2024-10922——Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-51647. Reason: This candidate is a ...
CVE-2024-51990CRITICAL9.3jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cau...
CVE-2024-51409MEDIUM6.5Buffer Overflow vulnerability in Tenda O3 v.1.0.0.5 allows a remote attacker to cause a denial of service via a network ...
CVE-2024-48325HIGH8.1Portabilis i-Educar 2.8.0 is vulnerable to SQL Injection in the "getDocuments" function of the "InstituicaoDocumentacaoC...
CVE-2024-10928MEDIUM6.1A vulnerability was found in MonoCMS up to 20240528. It has been declared as problematic. Affected by this vulnerability...
CVE-2024-10927MEDIUM6.1A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown funct...
CVE-2024-51736CRITICAL9.8Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when a...
CVE-2024-50345MEDIUM6.1symfony/http-foundation is a module for the Symphony PHP framework which defines an object-oriented layer for the HTTP s...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now