2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20338 | HIGH | 7.3 | 0.9% | Mar 6, 2024 | A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, l... |
| CVE-2024-20337 | HIGH | 8.2 | 29.9% | Mar 6, 2024 | A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacke... |
| CVE-2024-2005 | HIGH | 8 | 0.5% | Mar 6, 2024 | In Blue Planet® products through 22.12, a misconfiguration in the SAML implementation allows for privilege escalation.... |
| CVE-2024-25102 | HIGH | 7.8 | 0.1% | Mar 6, 2024 | This vulnerability exists in AppSamvid software due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user... |
| CVE-2024-1224 | HIGH | 7.1 | 0.1% | Mar 6, 2024 | This vulnerability exists in USB Pratirodh due to the usage of a weaker cryptographic algorithm (hash) SHA1 in user logi... |
| CVE-2024-26625 | HIGH | 7.8 | 0.2% | Mar 6, 2024 | In the Linux kernel, the following vulnerability has been resolved: llc: call sock_orphan() at release time syzbot rep... |
| CVE-2024-1220 | HIGH | 7.5 | 0.7% | Mar 6, 2024 | A stack-based buffer overflow in the built-in web server in Moxa NPort W2150A/W2250A Series firmware version 2.3 and pri... |
| CVE-2024-25817 | HIGH | 7.8 | 0.3% | Mar 6, 2024 | Buffer Overflow vulnerability in eza before version 0.18.2, allows local attackers to execute arbitrary code via the .gi... |
| CVE-2024-22889 | HIGH | 7.5 | 0.7% | Mar 6, 2024 | Due to incorrect access control in Plone version v6.0.9, remote attackers can view and list all files hosted on the webs... |
| CVE-2024-27765 | HIGH | 7.5 | 0.9% | Mar 5, 2024 | Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information vi... |
| CVE-2024-24786 | HIGH | 7.5 | 1.3% | Mar 5, 2024 | The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condit... |
| CVE-2024-24784 | HIGH | 7.5 | 1.0% | Mar 5, 2024 | The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is... |
| CVE-2024-24278 | HIGH | 7.5 | 0.7% | Mar 5, 2024 | An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive informa... |
| CVE-2024-1764 | HIGH | 7.6 | 0.4% | Mar 5, 2024 | Improper privilege management in Just-in-time (JIT) elevation module in Devolutions Server 2023.3.14.0 and earlier allow... |
| CVE-2024-25858 | HIGH | 8.4 | 0.2% | Mar 5, 2024 | In Foxit PDF Reader before 2024.1 and PDF Editor before 2024.1, code execution via JavaScript could occur because of an ... |
| CVE-2024-25613 | HIGH | 7.2 | 1.2% | Mar 5, 2024 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2024-25612 | HIGH | 7.2 | 1.2% | Mar 5, 2024 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2024-25611 | HIGH | 7.2 | 1.2% | Mar 5, 2024 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2024-1356 | HIGH | 7.2 | 1.2% | Mar 5, 2024 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2024-23296 | HIGH | 7.8 | 1.4% | Mar 5, 2024 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, i... |
| CVE-2024-23225 | HIGH | 7.8 | 1.5% | Mar 5, 2024 | A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, i... |
| CVE-2024-22255 | HIGH | 7.1 | 2.3% | Mar 5, 2024 | VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malic... |
| CVE-2024-22254 | HIGH | 8.2 | 0.5% | Mar 5, 2024 | VMware ESXi contains an out-of-bounds write vulnerability. A malicious actor with privileges within the VMX process may ... |
| CVE-2024-27929 | HIGH | 7.1 | 0.4% | Mar 5, 2024 | ImageSharp is a managed, cross-platform, 2D graphics library. A heap-use-after-free flaw was found in ImageSharp's Initi... |
| CVE-2024-27561 | HIGH | 8.1 | 0.6% | Mar 5, 2024 | A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now