2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-28084 | HIGH | 7.5 | 0.9% | Mar 3, 2024 | p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or pos... |
| CVE-2024-2149 | HIGH | 7.2 | 0.6% | Mar 3, 2024 | A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affec... |
| CVE-2024-2148 | HIGH | 8.8 | 0.8% | Mar 3, 2024 | A vulnerability classified as critical has been found in SourceCodester Online Mobile Management Store 1.0. This affects... |
| CVE-2024-27255 | HIGH | 7.5 | 0.3% | Mar 3, 2024 | IBM MQ Operator 2.0.0 LTS, 2.0.18 LTS, 3.0.0 CD, 3.0.1 CD, 2.4.0 through 2.4.7, 2.3.0 through 2.3.3, 2.2.0 through 2.2.2... |
| CVE-2024-26469 | HIGH | 8.1 | 0.3% | Mar 3, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaSho... |
| CVE-2024-25842 | HIGH | 7.5 | 0.5% | Mar 3, 2024 | An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) mo... |
| CVE-2024-25839 | HIGH | 7.5 | 0.5% | Mar 3, 2024 | An issue was discovered in Webbax "Super Newsletter" (supernewsletter) module for PrestaShop versions 1.4.21 and before,... |
| CVE-2024-25844 | HIGH | 7.5 | 0.5% | Mar 3, 2024 | An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26,... |
| CVE-2024-24307 | HIGH | 7.5 | 0.7% | Mar 3, 2024 | Path Traversal vulnerability in Tunis Soft "Product Designer" (productdesigner) module for PrestaShop before version 1.1... |
| CVE-2024-25016 | HIGH | 7.5 | 0.8% | Mar 3, 2024 | IBM MQ and IBM MQ Appliance 9.0, 9.1, 9.2, 9.3 LTS and 9.3 CD could allow a remote unauthenticated attacker to cause a d... |
| CVE-2024-0795 | HIGH | 7.2 | 0.9% | Mar 2, 2024 | If an attacked was given access to an instance with the admin or manager role there is no backend authentication that wo... |
| CVE-2024-25063 | HIGH | 7.5 | 0.6% | Mar 2, 2024 | Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain a... |
| CVE-2024-27355 | HIGH | 7.5 | 0.6% | Mar 1, 2024 | An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. When processing the AS... |
| CVE-2024-27354 | HIGH | 7.5 | 0.6% | Mar 1, 2024 | An issue was discovered in phpseclib 1.x before 1.0.23, 2.x before 2.0.47, and 3.x before 3.0.36. An attacker can constr... |
| CVE-2024-1869 | HIGH | 7.5 | 2.3% | Mar 1, 2024 | Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out... |
| CVE-2024-22182 | HIGH | 8.6 | 0.6% | Mar 1, 2024 | A remote, unauthenticated attacker may be able to send crafted messages to the web server of the Commend WS203VICM caus... |
| CVE-2024-1174 | HIGH | 8.2 | 0.2% | Mar 1, 2024 | Previous versions of HP ThinPro (prior to HP ThinPro 8.0 SP 8) could potentially contain security vulnerabilities. HP ha... |
| CVE-2024-2076 | HIGH | 7.5 | 0.9% | Mar 1, 2024 | A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by... |
| CVE-2024-1453 | HIGH | 7.8 | 0.3% | Mar 1, 2024 | In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local... |
| CVE-2024-2073 | HIGH | 8.8 | 0.7% | Mar 1, 2024 | A vulnerability has been found in SourceCodester Block Inserter for Dynamic Content 1.0 and classified as critical. This... |
| CVE-2024-27689 | HIGH | 8.8 | 0.3% | Mar 1, 2024 | Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php. |
| CVE-2024-27295 | HIGH | 8.2 | 0.7% | Mar 1, 2024 | Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Dir... |
| CVE-2024-27139 | HIGH | 7.5 | 1.3% | Mar 1, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva: a vulnerability in Apache Arch... |
| CVE-2024-27138 | HIGH | 7.5 | 1.2% | Mar 1, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** Incorrect Authorization vulnerability in Apache Archiva. Apache Archiva has a setting t... |
| CVE-2024-27497 | HIGH | 8.8 | 26.5% | Mar 1, 2024 | Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now