2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22939 | HIGH | 8.8 | 0.7% | Feb 29, 2024 | Cross Site Request Forgery vulnerability in FlyCms v.1.0 allows a remote attacker to execute arbitrary code via the syst... |
| CVE-2024-20321 | HIGH | 8.6 | 0.7% | Feb 29, 2024 | A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an una... |
| CVE-2024-20267 | HIGH | 8.6 | 0.9% | Feb 29, 2024 | A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attack... |
| CVE-2024-1939 | HIGH | 8.8 | 2.6% | Feb 29, 2024 | Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2024-1938 | HIGH | 8.8 | 0.8% | Feb 29, 2024 | Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object cor... |
| CVE-2024-1928 | HIGH | 7.2 | 0.7% | Feb 29, 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1... |
| CVE-2024-1470 | HIGH | 7.8 | 0.2% | Feb 29, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in NetIQ (OpenText) Client Login Extension on Windows all... |
| CVE-2024-1317 | HIGH | 8.8 | 0.7% | Feb 29, 2024 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is... |
| CVE-2024-1206 | HIGH | 8.8 | 0.7% | Feb 29, 2024 | The WP Recipe Maker plugin for WordPress is vulnerable to SQL Injection via the 'recipes' parameter in all versions up t... |
| CVE-2024-0702 | HIGH | 7.3 | 0.5% | Feb 29, 2024 | The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to unauthorized access due to miss... |
| CVE-2024-26146 | HIGH | 7.5 | 2.0% | Feb 29, 2024 | Rack is a modular Ruby web server interface. Carefully crafted headers can cause header parsing in Rack to take longer t... |
| CVE-2024-26141 | HIGH | 7.5 | 1.6% | Feb 29, 2024 | Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexp... |
| CVE-2024-25126 | HIGH | 7.5 | 35.4% | Feb 29, 2024 | Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser t... |
| CVE-2024-23910 | HIGH | 8.8 | 0.2% | Feb 28, 2024 | Cross-site request forgery (CSRF) vulnerability in ELECOM wireless LAN routers and wireless LAN repeater allows a remote... |
| CVE-2024-25869 | HIGH | 8.8 | 18.7% | Feb 28, 2024 | An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacke... |
| CVE-2024-25866 | HIGH | 8.8 | 0.8% | Feb 28, 2024 | A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute... |
| CVE-2024-22983 | HIGH | 8.1 | 0.9% | Feb 28, 2024 | SQL injection vulnerability in Projectworlds Visitor Management System in PHP v.1.0 allows a remote attacker to escalate... |
| CVE-2024-25859 | HIGH | 7.1 | 0.3% | Feb 28, 2024 | A path traversal vulnerability in the /path/to/uploads/ directory of Blesta before v5.9.2 allows attackers to takeover u... |
| CVE-2024-24148 | HIGH | 7.5 | 0.6% | Feb 28, 2024 | A memory leak issue discovered in parseSWF_FREECHARACTER in libming v0.4.8 allows attackers to cause a denial of service... |
| CVE-2024-27948 | HIGH | 8.8 | 0.2% | Feb 28, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in bytesforall Atahualpa.This issue affects Atahualpa: from n/a through ... |
| CVE-2024-26342 | HIGH | 7.5 | 0.9% | Feb 28, 2024 | A Null pointer dereference in usr/sbin/httpd in ASUS AC68U 3.0.0.4.384.82230 allows remote attackers to trigger DoS via ... |
| CVE-2024-1847 | HIGH | 7.8 | 0.3% | Feb 28, 2024 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Typ... |
| CVE-2024-21749 | HIGH | 8.8 | 0.2% | Feb 28, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Atakan Au 1 click disable all.This issue affects 1 click disable all:... |
| CVE-2024-24702 | HIGH | 8.8 | 0.2% | Feb 28, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Matt Martz & Andy Stratton Page Restrict.This issue affects Page Rest... |
| CVE-2024-27515 | HIGH | 7.2 | 0.6% | Feb 28, 2024 | Osclass 5.1.2 is vulnerable to SQL Injection. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now