2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-26540 | HIGH | 7.8 | 0.3% | Mar 15, 2024 | A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_lo... |
| CVE-2024-1713 | HIGH | 7.2 | 0.5% | Mar 14, 2024 | A user who can create objects in a database with plv8 3.2.1 installed is able to cause deferred triggers to execute as t... |
| CVE-2024-0860 | HIGH | 7.5 | 0.5% | Mar 14, 2024 | The affected product is vulnerable to a cleartext transmission of sensitive information vulnerability, which may allow ... |
| CVE-2024-28425 | HIGH | 7.5 | 0.6% | Mar 14, 2024 | greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/... |
| CVE-2024-28424 | HIGH | 8.8 | 0.7% | Mar 14, 2024 | zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cl... |
| CVE-2024-27301 | HIGH | 7.3 | 0.3% | Mar 14, 2024 | Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability i... |
| CVE-2024-27266 | HIGH | 8.2 | 0.8% | Mar 14, 2024 | IBM Maximo Application Suite 7.6.1.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML ... |
| CVE-2024-22346 | HIGH | 7.8 | 0.2% | Mar 14, 2024 | Db2 for IBM i 7.2, 7.3, 7.4, and 7.5 infrastructure could allow a local user to gain elevated privileges due to an unqua... |
| CVE-2024-28181 | HIGH | 8.1 | 0.8% | Mar 14, 2024 | turbo_boost-commands is a set of commands to help you build robust reactive applications with Rails & Hotwire. TurboBoo... |
| CVE-2024-1623 | HIGH | 7.8 | 0.2% | Mar 14, 2024 | Insufficient session timeout vulnerability in the FAST3686 V2 Vodafone router from Sagemcom. This vulnerability could al... |
| CVE-2024-28746 | HIGH | 8.1 | 1.3% | Mar 14, 2024 | Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permiss... |
| CVE-2024-22397 | HIGH | 8.3 | 1.1% | Mar 14, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the SonicOS SSLVPN portal allows... |
| CVE-2024-1882 | HIGH | 7.2 | 1.4% | Mar 14, 2024 | This vulnerability allows an already authenticated admin user to create a malicious payload that could be leveraged for ... |
| CVE-2024-25652 | HIGH | 8.4 | 0.6% | Mar 14, 2024 | In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access... |
| CVE-2024-1654 | HIGH | 7.2 | 1.3% | Mar 14, 2024 | This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker... |
| CVE-2024-25228 | HIGH | 8.8 | 25.9% | Mar 14, 2024 | Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerify... |
| CVE-2024-28251 | HIGH | 7.3 | 0.2% | Mar 14, 2024 | Querybook is a Big Data Querying UI, combining collocated table metadata and a simple notebook interface. Querybook's da... |
| CVE-2024-27102 | HIGH | 8.5 | 0.5% | Mar 13, 2024 | Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions... |
| CVE-2024-24105 | HIGH | 7.8 | 0.3% | Mar 13, 2024 | SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary co... |
| CVE-2024-22167 | HIGH | 7.9 | 0.2% | Mar 13, 2024 | A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrar... |
| CVE-2024-0801 | HIGH | 7.5 | 41.8% | Mar 13, 2024 | A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in ASNative.dll. |
| CVE-2024-0800 | HIGH | 8.8 | 1.0% | Mar 13, 2024 | A path traversal vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in edge-app-base-webui.jar!com.ca.... |
| CVE-2024-2432 | HIGH | 7 | 0.4% | Mar 13, 2024 | A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local... |
| CVE-2024-28195 | HIGH | 8.8 | 0.4% | Mar 13, 2024 | your_spotify is an open source, self hosted Spotify tracking dashboard. YourSpotify versions < 1.9.0 do not protect the ... |
| CVE-2024-20327 | HIGH | 7.4 | 0.3% | Mar 13, 2024 | A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now