2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25902 | HIGH | 7.2 | 0.5% | Feb 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware... |
| CVE-2024-24868 | HIGH | 8.8 | 0.5% | Feb 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Smartypants SP Pro... |
| CVE-2024-21886 | HIGH | 7.8 | 1.4% | Feb 28, 2024 | A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an appli... |
| CVE-2024-21885 | HIGH | 7.8 | 1.4% | Feb 28, 2024 | A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated arr... |
| CVE-2024-1514 | HIGH | 7.5 | 0.7% | Feb 28, 2024 | The WP eCommerce plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'cart_contents' parameter ... |
| CVE-2024-26298 | HIGH | 8.8 | 0.9% | Feb 27, 2024 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a... |
| CVE-2024-26297 | HIGH | 8.8 | 0.9% | Feb 27, 2024 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a... |
| CVE-2024-26296 | HIGH | 8.8 | 0.9% | Feb 27, 2024 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a... |
| CVE-2024-26295 | HIGH | 8.8 | 0.9% | Feb 27, 2024 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a... |
| CVE-2024-26294 | HIGH | 8.8 | 0.9% | Feb 27, 2024 | Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run a... |
| CVE-2024-0763 | HIGH | 8.1 | 0.9% | Feb 27, 2024 | Any user can delete an arbitrary folder (recursively) on a remote server due to bad input sanitization leading to path t... |
| CVE-2024-24027 | HIGH | 7.2 | 0.7% | Feb 27, 2024 | SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function Dist... |
| CVE-2024-25840 | HIGH | 7.5 | 0.6% | Feb 27, 2024 | In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World ... |
| CVE-2024-24323 | HIGH | 7.2 | 0.7% | Feb 27, 2024 | SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via ... |
| CVE-2024-1925 | HIGH | 8.1 | 0.6% | Feb 27, 2024 | A vulnerability was found in Ctcms 2.1.2. It has been declared as critical. This vulnerability affects unknown code of t... |
| CVE-2024-27508 | HIGH | 7.5 | 0.7% | Feb 27, 2024 | Atheme 7.2.12 contains a memory leak vulnerability in /atheme/src/crypto-benchmark/main.c. |
| CVE-2024-26142 | HIGH | 7.5 | 1.5% | Feb 27, 2024 | Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept h... |
| CVE-2024-25398 | HIGH | 7.5 | 0.7% | Feb 27, 2024 | In Srelay (the SOCKS proxy and Relay) v.0.4.8p3, a specially crafted network payload can trigger a denial of service con... |
| CVE-2024-27507 | HIGH | 7.5 | 1.2% | Feb 27, 2024 | libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp. |
| CVE-2024-25723 | HIGH | 8.8 | 70.6% | Feb 27, 2024 | ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because t... |
| CVE-2024-1920 | HIGH | 8.1 | 0.7% | Feb 27, 2024 | A vulnerability, which was classified as critical, has been found in osuuu LightPicture up to 1.2.2. This issue affects ... |
| CVE-2024-0819 | HIGH | 7.8 | 0.2% | Feb 27, 2024 | Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and ma... |
| CVE-2024-0551 | HIGH | 7.1 | 0.6% | Feb 27, 2024 | Enable exports of the database and associated exported information of the system via the default user role. The attacked... |
| CVE-2024-0197 | HIGH | 7.8 | 0.4% | Feb 27, 2024 | A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate the... |
| CVE-2024-0759 | HIGH | 7.5 | 1.0% | Feb 27, 2024 | Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission l... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now