2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2009 | HIGH | 7.5 | 0.6% | Feb 29, 2024 | A vulnerability was found in Nway Pro 9. It has been rated as problematic. Affected by this issue is the function ajax_l... |
| CVE-2024-27657 | HIGH | 8.8 | 1.2% | Feb 29, 2024 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the User-Agent parameter. This vulnerability... |
| CVE-2024-27656 | HIGH | 8.8 | 0.6% | Feb 29, 2024 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the Cookie parameter. This vulnerability all... |
| CVE-2024-27655 | HIGH | 8.8 | 1.2% | Feb 29, 2024 | D-Link DIR-823G A1V1.0.2B05 was discovered to contain a buffer overflow via the SOAPACTION parameter. This vulnerability... |
| CVE-2024-1595 | HIGH | 7.8 | 0.4% | Feb 29, 2024 | Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82 insecurely loads libraries, which may allow an attacker to use ... |
| CVE-2024-0068 | HIGH | 7.1 | 0.2% | Feb 29, 2024 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows Fi... |
| CVE-2024-20765 | HIGH | 7.8 | 0.6% | Feb 29, 2024 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could... |
| CVE-2024-1619 | HIGH | 8.8 | 0.4% | Feb 29, 2024 | Kaspersky has fixed a security issue in the Kaspersky Security 8.0 for Linux Mail Server. The issue was that an attacker... |
| CVE-2024-1435 | HIGH | 7.5 | 0.5% | Feb 29, 2024 | Insertion of Sensitive Information Into Sent Data vulnerability in tainacan Tainacan tainacan.This issue affects Tainaca... |
| CVE-2024-1468 | HIGH | 8.8 | 1.2% | Feb 29, 2024 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary file uploads due ... |
| CVE-2024-22871 | HIGH | 7.5 | 1.5% | Feb 29, 2024 | An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure... |
| CVE-2024-27284 | HIGH | 7.5 | 0.8% | Feb 29, 2024 | cassandra-rs is a Cassandra (CQL) driver for Rust. Code that attempts to use an item (e.g., a row) returned by an iterat... |
| CVE-2024-26470 | HIGH | 8.1 | 1.0% | Feb 29, 2024 | A host header injection vulnerability in the forgot password function of FullStackHero's WebAPI Boilerplate v1.0.0 and v... |
| CVE-2024-26461 | HIGH | 7.5 | 1.1% | Feb 29, 2024 | Kerberos 5 (aka krb5) 1.21.2 contains a memory leak vulnerability in /krb5/src/lib/gssapi/krb5/k5sealv3.c. |
| CVE-2024-26131 | HIGH | 7.8 | 0.5% | Feb 29, 2024 | Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redire... |
| CVE-2024-25932 | HIGH | 8.8 | 0.3% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Manish Kumar Agarwal Change Table Prefix change-table-prefix allows C... |
| CVE-2024-25931 | HIGH | 8.8 | 0.3% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Heureka Group Heureka.This issue affects Heureka: from n/a through 1.... |
| CVE-2024-25930 | HIGH | 8.8 | 0.3% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Nuggethon Custom Order Statuses for WooCommerce.This issue affects Cu... |
| CVE-2024-25832 | HIGH | 8.8 | 12.8% | Feb 29, 2024 | F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to ... |
| CVE-2024-25713 | HIGH | 8.6 | 1.8% | Feb 29, 2024 | yyjson through 0.8.0 has a double free, leading to remote code execution in some cases, because the pool_free function l... |
| CVE-2024-25262 | HIGH | 8.1 | 0.9% | Feb 29, 2024 | texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulne... |
| CVE-2024-25006 | HIGH | 8.1 | 1.0% | Feb 29, 2024 | XenForo before 2.2.14 allows Directory Traversal (with write access) by an authenticated user who has permissions to adm... |
| CVE-2024-24701 | HIGH | 8.8 | 0.3% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Native Grid LLC A no-code page builder for beautiful performance-base... |
| CVE-2024-23519 | HIGH | 8.8 | 0.3% | Feb 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in M&S Consulting Email Before Download.This issue affects Email Before ... |
| CVE-2024-23302 | HIGH | 7.5 | 0.7% | Feb 29, 2024 | Couchbase Server before 7.2.4 has a private key leak in goxdcr.log. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now