2024 CVE Vulnerabilities

39,269 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-28432HIGH8.8DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article...
CVE-2024-28431HIGH8.8DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/catalog...
CVE-2024-2415HIGH7.8Command injection vulnerability in Movistar 4G router affecting version ES_WLD71-T1_v2.0.201820. This vulnerability allo...
CVE-2024-2414HIGH8.8The primary channel is unprotected on Movistar 4G router affecting E version S_WLD71-T1_v2.0.201820. This device has the...
CVE-2024-26529HIGH7.5An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) vi...
CVE-2024-2400HIGH8.8Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially ...
CVE-2024-2107HIGH7.5The Blossom Spa theme for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including...
CVE-2024-24092HIGH7.8SQL Injection vulnerability in Code-projects.org Scholars Tracking System 1.0 allows attackers to run arbitrary code via...
CVE-2024-23300HIGH7.8A use-after-free issue was addressed with improved memory management. This issue is fixed in GarageBand 10.4.11. Process...
CVE-2024-28186HIGH7.1FreeScout is an open source help desk and shared inbox built with PHP. A vulnerability has been identified in the Free ...
CVE-2024-28121HIGH8.8stimulus_reflex is a system to extend the capabilities of both Rails and Stimulus by intercepting user interactions and ...
CVE-2024-27894HIGH8.8The Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the functio...
CVE-2024-1765HIGH7.5Cloudflare Quiche (through version 0.19.1/0.20.0) was affected by an unlimited resource allocation vulnerability causing...
CVE-2024-1138HIGH8.8The FTL Server component of TIBCO Software Inc.'s TIBCO FTL - Enterprise Edition contains a vulnerability that allows a ...
CVE-2024-28340HIGH7.5An information leak in the currentsetting.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear C...
CVE-2024-28338HIGH8A login bypass in TOTOLINK A8000RU V7.1cu.643_B20200521 allows attackers to login to Administrator accounts via providin...
CVE-2024-26204HIGH7.5Outlook for Android Information Disclosure Vulnerability
CVE-2024-26203HIGH7.3Azure Data Studio Elevation of Privilege Vulnerability
CVE-2024-26199HIGH7.8Microsoft Office Elevation of Privilege Vulnerability
CVE-2024-26198HIGH8.8Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2024-26190HIGH7.5Microsoft QUIC Denial of Service Vulnerability
CVE-2024-26182HIGH7.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-26178HIGH7.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-26176HIGH7.8Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-26173HIGH7.8Windows Kernel Elevation of Privilege Vulnerability

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now