2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1931 | HIGH | 7.5 | 2.5% | Mar 7, 2024 | NLnet Labs Unbound version 1.18.0 up to and including version 1.19.1 contain a vulnerability that can cause denial of se... |
| CVE-2024-1382 | HIGH | 8.8 | 0.9% | Mar 7, 2024 | The Restaurant Reservations plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includ... |
| CVE-2024-28215 | HIGH | 7.5 | 0.5% | Mar 7, 2024 | nGrinder before 3.5.9 allows an attacker to create or update webhook configuration due to lack of access control, which ... |
| CVE-2024-28094 | HIGH | 8.8 | 0.6% | Mar 7, 2024 | Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the au... |
| CVE-2024-0815 | HIGH | 8.8 | 1.1% | Mar 7, 2024 | Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0 |
| CVE-2024-0817 | HIGH | 7.8 | 1.2% | Mar 7, 2024 | Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 |
| CVE-2024-26566 | HIGH | 8.2 | 0.6% | Mar 7, 2024 | An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification co... |
| CVE-2024-24375 | HIGH | 7.5 | 0.5% | Mar 7, 2024 | SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive information via /admin/adm... |
| CVE-2024-1299 | HIGH | 8.1 | 0.5% | Mar 7, 2024 | A privilege escalation vulnerability was discovered in GitLab affecting versions 16.8 prior to 16.8.4 and 16.9 prior to ... |
| CVE-2024-0199 | HIGH | 8 | 0.7% | Mar 7, 2024 | An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to ... |
| CVE-2024-28110 | HIGH | 7.5 | 0.7% | Mar 6, 2024 | Go SDK for CloudEvents is the official CloudEvents SDK to integrate applications with CloudEvents. Prior to version 2.15... |
| CVE-2024-27917 | HIGH | 7.5 | 0.6% | Mar 6, 2024 | Shopware is an open commerce platform based on Symfony Framework and Vue. The Symfony Session Handler pops the Session C... |
| CVE-2024-27915 | HIGH | 8.1 | 0.4% | Mar 6, 2024 | Sulu is a PHP content management system. Starting in verson 2.2.0 and prior to version 2.4.17 and 2.5.13, access to page... |
| CVE-2024-2176 | HIGH | 8.8 | 1.3% | Mar 6, 2024 | Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap c... |
| CVE-2024-2174 | HIGH | 8.8 | 12.6% | Mar 6, 2024 | Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exp... |
| CVE-2024-2173 | HIGH | 8.8 | 13.6% | Mar 6, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of b... |
| CVE-2024-27303 | HIGH | 7.3 | 0.3% | Mar 6, 2024 | electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Wind... |
| CVE-2024-27289 | HIGH | 8.1 | 0.9% | Mar 6, 2024 | pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the followin... |
| CVE-2024-27287 | HIGH | 8.7 | 0.7% | Mar 6, 2024 | ESPHome is a system to control your ESP8266/ESP32 for Home Automation systems. Starting in version 2023.12.9 and prior t... |
| CVE-2024-25111 | HIGH | 7.5 | 65.3% | Mar 6, 2024 | Squid is a web proxy cache. Starting in version 3.5.27 and prior to version 6.8, Squid may be vulnerable to a Denial of ... |
| CVE-2024-24766 | HIGH | 7.5 | 0.8% | Mar 6, 2024 | CasaOS-UserService provides user management functionalities to CasaOS. Starting in version 0.4.4.3 and prior to version ... |
| CVE-2024-24761 | HIGH | 7.5 | 0.6% | Mar 6, 2024 | Galette is a membership management web application for non profit organizations. Starting in version 1.0.0 and prior to ... |
| CVE-2024-2216 | HIGH | 8.8 | 0.8% | Mar 6, 2024 | A missing permission check in an HTTP endpoint in Jenkins docker-build-step Plugin 2.11 and earlier allows attackers wit... |
| CVE-2024-28160 | HIGH | 8.8 | 1.1% | Mar 6, 2024 | Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored ... |
| CVE-2024-28157 | HIGH | 8 | 1.1% | Mar 6, 2024 | Jenkins GitBucket Plugin 0.8 and earlier does not sanitize Gitbucket URLs on build views, resulting in a stored cross-si... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now