2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-24098 | HIGH | 7.8 | 0.4% | Mar 5, 2024 | Code-projects Scholars Tracking System 1.0 is vulnerable to SQL Injection via the News Feed. |
| CVE-2024-27622 | HIGH | 7.2 | 2.0% | Mar 5, 2024 | A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2... |
| CVE-2024-20838 | HIGH | 7.8 | 0.2% | Mar 5, 2024 | Improper validation vulnerability in Samsung Internet prior to version 24.0.3.2 allows local attackers to execute arbitr... |
| CVE-2024-20835 | HIGH | 7.8 | 0.1% | Mar 5, 2024 | Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local atta... |
| CVE-2024-22188 | HIGH | 7.2 | 2.0% | Mar 5, 2024 | TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell co... |
| CVE-2024-1731 | HIGH | 8.8 | 0.9% | Mar 5, 2024 | The Auto Refresh Single Page plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and inclu... |
| CVE-2024-0825 | HIGH | 8.8 | 0.9% | Mar 5, 2024 | The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all ... |
| CVE-2024-25269 | HIGH | 7.5 | 0.7% | Mar 5, 2024 | libheif <= 1.17.6 contains a memory leak in the function JpegEncoder::Encode. This flaw allows an attacker to cause a de... |
| CVE-2024-27718 | HIGH | 7.8 | 1.1% | Mar 5, 2024 | SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.S200 allows a local attacker to obtain s... |
| CVE-2024-25731 | HIGH | 7.5 | 0.5% | Mar 5, 2024 | The Elink Smart eSmartCam (com.cn.dq.ipc) application 2.1.5 for Android contains hardcoded AES encryption keys that can ... |
| CVE-2024-25164 | HIGH | 7.5 | 0.9% | Mar 5, 2024 | iA Path Traversal vulnerability exists in iDURAR v2.0.0, that allows unauthenticated attackers to expose sensitive files... |
| CVE-2024-1936 | HIGH | 7.5 | 0.7% | Mar 4, 2024 | The encrypted subject of an email message could be incorrectly and permanently assigned to an arbitrary other email mess... |
| CVE-2024-2168 | HIGH | 7.2 | 0.6% | Mar 4, 2024 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as crit... |
| CVE-2024-27889 | HIGH | 8.8 | 8.8% | Mar 4, 2024 | Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista ... |
| CVE-2024-27199 | HIGH | 7.3 | 100.0% | Mar 4, 2024 | In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible |
| CVE-2024-27694 | HIGH | 7.4 | 0.2% | Mar 4, 2024 | FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the /system/share/ztree_cate... |
| CVE-2024-22452 | HIGH | 7.8 | 0.2% | Mar 4, 2024 | Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low priv... |
| CVE-2024-0156 | HIGH | 7.8 | 0.2% | Mar 4, 2024 | Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attack... |
| CVE-2024-0155 | HIGH | 7.8 | 0.2% | Mar 4, 2024 | Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileged attacke... |
| CVE-2024-26622 | HIGH | 7.8 | 0.2% | Mar 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: tomoyo: fix UAF write bug in tomoyo_write_control()... |
| CVE-2024-20034 | HIGH | 7.2 | 0.3% | Mar 4, 2024 | In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati... |
| CVE-2024-20029 | HIGH | 8.4 | 0.1% | Mar 4, 2024 | In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local esc... |
| CVE-2024-20027 | HIGH | 7.9 | 0.1% | Mar 4, 2024 | In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of ... |
| CVE-2024-20005 | HIGH | 8.2 | 0.1% | Mar 4, 2024 | In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of p... |
| CVE-2024-28088 | HIGH | 8.1 | 1.7% | Mar 4, 2024 | LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path pa... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now