2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-2607HIGH8.1Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue onl...
CVE-2024-24042HIGH8.8Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary ...
CVE-2024-26369HIGH7.5An issue in the HistoryQosPolicy component of FastDDS v2.12.x, v2.11.x, v2.10.x, and v2.6.x leads to a SIGABRT (signal a...
CVE-2024-22017HIGH7.3setuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows th...
CVE-2024-28865HIGH7.5django-wiki is a wiki system for Django. Installations of django-wiki prior to version 0.10.1 are vulnerable to maliciou...
CVE-2024-28248HIGH7.2Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.9 an...
CVE-2024-21661HIGH7.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.8.13, 2.9.9, and 2.10.4, a...
CVE-2024-0858HIGH8.8The Innovs HR WordPress plugin before 1.0.3.7.1 does not have CSRF checks in some places, which could allow attackers to...
CVE-2024-0780HIGH8.8The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation when reset...
CVE-2024-0779HIGH8.8The Enjoy Social Feed plugin for WordPress website WordPress plugin through 6.2.2 does not have authorisation and CSRF i...
CVE-2024-20761HIGH7.8Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbi...
CVE-2024-20754HIGH7.8Lightroom Desktop versions 7.1.2 and earlier are affected by an Untrusted Search Path vulnerability that could result in...
CVE-2024-28054HIGH7.4Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict ...
CVE-2024-2390HIGH7.8 As a part of Tenable’s vulnerability disclosure program, a vulnerability in a Nessus plugin was identified and reported...
CVE-2024-2229HIGH7.8 CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious...
CVE-2024-2052HIGH7.5 CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated file...
CVE-2024-2050HIGH8.2 CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when ...
CVE-2024-20756HIGH7.8Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arb...
CVE-2024-20755HIGH7.8Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result ...
CVE-2024-20752HIGH7.8Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary...
CVE-2024-22257HIGH8.2In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1....
CVE-2024-20746HIGH7.8Premiere Pro versions 24.1, 23.6.2 and earlier are affected by an out-of-bounds write vulnerability that could result in...
CVE-2024-20745HIGH7.8Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could res...
CVE-2024-1753HIGH8.6A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the ...
CVE-2024-2599HIGH8.8File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated us...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now