2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-28847 | HIGH | 8.8 | 2.4% | Mar 15, 2024 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository... |
| CVE-2024-28254 | HIGH | 8.8 | 45.7% | Mar 15, 2024 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository... |
| CVE-2024-28253 | HIGH | 8.8 | 12.5% | Mar 15, 2024 | OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository... |
| CVE-2024-28242 | HIGH | 7.5 | 0.5% | Mar 15, 2024 | Discourse is an open source platform for community discussion. In affected versions an attacker can learn that secret ca... |
| CVE-2024-27920 | HIGH | 7.4 | 0.4% | Mar 15, 2024 | projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant s... |
| CVE-2024-24827 | HIGH | 7.5 | 0.6% | Mar 15, 2024 | Discourse is an open source platform for community discussion. Without a rate limit on the POST /uploads endpoint, it ma... |
| CVE-2024-28854 | HIGH | 7.5 | 1.0% | Mar 15, 2024 | tls-listener is a rust lang wrapper around a connection listener to support TLS. With the default configuration of tls-l... |
| CVE-2024-28851 | HIGH | 7.8 | 0.3% | Mar 15, 2024 | The Snowflake Hive metastore connector provides an easy way to query Hive-managed data via Snowflake. Snowflake Hive Met... |
| CVE-2024-28252 | HIGH | 7.5 | 0.6% | Mar 15, 2024 | CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. If you have a NetFraming b... |
| CVE-2024-2497 | HIGH | 7.2 | 0.9% | Mar 15, 2024 | A vulnerability was found in RaspAP raspap-webgui 3.0.9 and classified as critical. This issue affects some unknown proc... |
| CVE-2024-28404 | HIGH | 8 | 0.5% | Mar 15, 2024 | TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering... |
| CVE-2024-28318 | HIGH | 7.1 | 0.5% | Mar 15, 2024 | gpac 2.3-DEV-rev921-g422b78ecf-master was discovered to contain a out of boundary write vulnerability via swf_get_string... |
| CVE-2024-27192 | HIGH | 7.1 | 0.4% | Mar 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scott Reilly Confi... |
| CVE-2024-25921 | HIGH | 7.1 | 0.3% | Mar 15, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Concerted Action A... |
| CVE-2024-2490 | HIGH | 8.8 | 1.6% | Mar 15, 2024 | A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the functi... |
| CVE-2024-2450 | HIGH | 8.8 | 0.6% | Mar 15, 2024 | Mattermost versions 8.1.x before 8.1.10, 9.2.x before 9.2.6, 9.3.x before 9.3.2, and 9.4.x before 9.4.3 fail to correctl... |
| CVE-2024-2489 | HIGH | 8.8 | 1.6% | Mar 15, 2024 | A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formSetQosBand... |
| CVE-2024-2488 | HIGH | 8.8 | 1.5% | Mar 15, 2024 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function form... |
| CVE-2024-2487 | HIGH | 8.8 | 1.6% | Mar 15, 2024 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the fu... |
| CVE-2024-2486 | HIGH | 8.8 | 1.6% | Mar 15, 2024 | A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQ... |
| CVE-2024-28353 | HIGH | 8.8 | 2.1% | Mar 15, 2024 | There is a command injection vulnerability in the TRENDnet TEW-827DRU router with firmware version 2.10B01. An attacker ... |
| CVE-2024-2485 | HIGH | 8.8 | 1.7% | Mar 15, 2024 | A vulnerability was found in Tenda AC18 15.03.05.05 and classified as critical. Affected by this issue is the function f... |
| CVE-2024-27756 | HIGH | 8.8 | 0.7% | Mar 15, 2024 | GLPI through 10.0.12 allows CSV injection by an attacker who is able to create an asset with a crafted title. |
| CVE-2024-1795 | HIGH | 8.8 | 0.6% | Mar 15, 2024 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to SQL Injection via the 'na... |
| CVE-2024-2480 | HIGH | 8.8 | 0.6% | Mar 15, 2024 | A vulnerability classified as critical was found in MHA Sistemas arMHAzena 9.6.0.0. This vulnerability affects unknown c... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now