2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49401 | HIGH | 7.1 | 0.2% | Nov 6, 2024 | Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privi... |
| CVE-2024-34682 | LOW | 2.4 | 0.2% | Nov 6, 2024 | Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi passw... |
| CVE-2024-34681 | MEDIUM | 6.6 | 0.1% | Nov 6, 2024 | Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local perm... |
| CVE-2024-34680 | MEDIUM | 5.5 | 0.1% | Nov 6, 2024 | Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to... |
| CVE-2024-34679 | HIGH | 7.1 | 0.1% | Nov 6, 2024 | Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone... |
| CVE-2024-34678 | HIGH | 7.8 | 0.2% | Nov 6, 2024 | Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corrup... |
| CVE-2024-34677 | LOW | 3.3 | 0.1% | Nov 6, 2024 | Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious a... |
| CVE-2024-34676 | HIGH | 7.3 | 0.2% | Nov 6, 2024 | Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attacker... |
| CVE-2024-34675 | MEDIUM | 4.6 | 0.2% | Nov 6, 2024 | Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to u... |
| CVE-2024-34674 | MEDIUM | 4.6 | 0.2% | Nov 6, 2024 | Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across mult... |
| CVE-2024-34673 | MEDIUM | 5.5 | 0.1% | Nov 6, 2024 | Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial... |
| CVE-2024-10647 | MEDIUM | 6.1 | 0.3% | Nov 6, 2024 | The WS Form LITE – Drag & Drop Contact Form Builder for WordPress plugin for WordPress is vulnerable to Reflected Cross-... |
| CVE-2024-10028 | HIGH | 7.5 | 0.4% | Nov 6, 2024 | The Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin plugin for WordPress is vulnerable to S... |
| CVE-2024-51358 | CRITICAL | 9.8 | 0.9% | Nov 5, 2024 | An issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the... |
| CVE-2024-51115 | CRITICAL | 9.8 | 1.7% | Nov 5, 2024 | DCME-320 v7.4.12.90 was discovered to contain a command injection vulnerability. |
| CVE-2024-48746 | CRITICAL | 9.8 | 0.7% | Nov 5, 2024 | An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the N... |
| CVE-2024-48176 | CRITICAL | 9.8 | 0.5% | Nov 5, 2024 | Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the... |
| CVE-2024-47464 | MEDIUM | 6.8 | 0.9% | Nov 5, 2024 | An authenticated Path Traversal vulnerability exists in Instant AOS-8 and AOS-10. Successful exploitation of this vulner... |
| CVE-2024-47463 | HIGH | 7.2 | 1.2% | Nov 5, 2024 | An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful explo... |
| CVE-2024-47462 | HIGH | 7.2 | 1.2% | Nov 5, 2024 | An arbitrary file creation vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. Successful explo... |
| CVE-2024-47461 | HIGH | 7.2 | 1.7% | Nov 5, 2024 | An authenticated command injection vulnerability exists in the Instant AOS-8 and AOS-10 command line interface. A succes... |
| CVE-2024-47460 | CRITICAL | 9 | 1.4% | Nov 5, 2024 | Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sen... |
| CVE-2024-42509 | CRITICAL | 9.8 | 2.0% | Nov 5, 2024 | Command injection vulnerability in the underlying CLI service could lead to unauthenticated remote code execution by sen... |
| CVE-2024-51756 | LOW | 2.3 | 0.6% | Nov 5, 2024 | The cap-std project is organized around the eponymous `cap-std` crate, and develops libraries to make it easy to write c... |
| CVE-2024-51745 | CRITICAL | 10 | 0.8% | Nov 5, 2024 | Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks ac... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now