2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-38312 | MEDIUM | 6.5 | 0.3% | Jun 13, 2024 | When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly w... |
| CVE-2024-38083 | MEDIUM | 4.3 | 0.5% | Jun 13, 2024 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2024-30058 | MEDIUM | 5.4 | 0.4% | Jun 13, 2024 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
| CVE-2024-30057 | MEDIUM | 5.4 | 0.4% | Jun 13, 2024 | Microsoft Edge for iOS Spoofing Vulnerability |
| CVE-2024-36589 | MEDIUM | 4.3 | 0.2% | Jun 13, 2024 | An issue in Annonshop.app DecentralizeJustice/anonymousLocker commit 2b2b4 to ba9fd and DecentralizeJustice/anonBackend ... |
| CVE-2024-36588 | MEDIUM | 6.5 | 0.4% | Jun 13, 2024 | An issue in Annonshop.app DecentralizeJustice/ anonymousLocker commit 2b2b4 allows attackers to send messages erroneousl... |
| CVE-2024-38283 | MEDIUM | 5.1 | 0.1% | Jun 13, 2024 | Sensitive customer information is stored in the device without encryption. |
| CVE-2024-38280 | MEDIUM | 4.6 | 0.2% | Jun 13, 2024 | An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard ... |
| CVE-2024-38279 | MEDIUM | 4.6 | 0.3% | Jun 13, 2024 | The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentic... |
| CVE-2024-37280 | MEDIUM | 4.9 | 0.5% | Jun 13, 2024 | A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field map... |
| CVE-2024-37279 | MEDIUM | 4.3 | 0.4% | Jun 13, 2024 | A flaw was discovered in Kibana, allowing view-only users of alerting to use the run_soon API making the alerting rule r... |
| CVE-2024-37877 | MEDIUM | 5.5 | 0.3% | Jun 13, 2024 | UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occu... |
| CVE-2024-37307 | MEDIUM | 6.5 | 0.2% | Jun 13, 2024 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.0 an... |
| CVE-2024-28969 | MEDIUM | 4.3 | 0.4% | Jun 13, 2024 | Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an inter... |
| CVE-2024-28968 | MEDIUM | 5.4 | 0.3% | Jun 13, 2024 | Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal... |
| CVE-2024-28967 | MEDIUM | 5.4 | 0.3% | Jun 13, 2024 | Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an inter... |
| CVE-2024-28966 | MEDIUM | 5.4 | 0.3% | Jun 13, 2024 | Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an inter... |
| CVE-2024-28965 | MEDIUM | 5.4 | 0.3% | Jun 13, 2024 | Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an inter... |
| CVE-2024-37309 | MEDIUM | 5.3 | 0.7% | Jun 13, 2024 | CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where th... |
| CVE-2024-37308 | MEDIUM | 5.4 | 0.4% | Jun 13, 2024 | The Cooked Pro recipe plugin for WordPress is vulnerable to Persistent Cross-Site Scripting (XSS) via the `_recipe_setti... |
| CVE-2024-36647 | MEDIUM | 5.4 | 0.3% | Jun 13, 2024 | A stored cross-site scripting (XSS) vulnerability in Church CRM v5.8.0 allows attackers to execute arbitrary web scripts... |
| CVE-2024-25052 | MEDIUM | 4.4 | 0.2% | Jun 13, 2024 | IBM Jazz Reporting Service 7.0.3 stores user credentials in plain clear text which can be read by an admin user. IBM X-F... |
| CVE-2024-36395 | MEDIUM | 6.1 | 0.3% | Jun 13, 2024 | Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
| CVE-2024-34130 | MEDIUM | 5.5 | 0.3% | Jun 13, 2024 | Acrobat Mobile Sign Android versions 24.4.2.33155 and earlier are affected by an Incorrect Authorization vulnerability t... |
| CVE-2024-34113 | MEDIUM | 5.5 | 0.3% | Jun 13, 2024 | ColdFusion versions 2023u7, 2021u13 and earlier are affected by a Weak Cryptography for Passwords vulnerability that cou... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now