2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25711 | HIGH | 7.5 | 1.0% | Feb 27, 2024 | diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as .... |
| CVE-2024-24100 | HIGH | 8.3 | 0.6% | Feb 27, 2024 | Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via PublisherID. |
| CVE-2024-24096 | HIGH | 7.8 | 0.4% | Feb 27, 2024 | Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN. |
| CVE-2024-22917 | HIGH | 8.6 | 0.7% | Feb 27, 2024 | SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute ar... |
| CVE-2024-27356 | HIGH | 7.5 | 23.9% | Feb 27, 2024 | An issue was discovered on certain GL-iNet devices. Attackers can download files such as logs via commands, potentially ... |
| CVE-2024-22544 | HIGH | 8 | 9.3% | Feb 27, 2024 | An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbi... |
| CVE-2024-27093 | HIGH | 7.5 | 0.6% | Feb 26, 2024 | Minder is a Software Supply Chain Security Platform. In version 0.0.31 and earlier, it is possible for an attacker to re... |
| CVE-2024-26455 | HIGH | 7.5 | 0.7% | Feb 26, 2024 | fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c. |
| CVE-2024-25768 | HIGH | 7.5 | 0.7% | Feb 26, 2024 | OpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c. |
| CVE-2024-27081 | HIGH | 8.8 | 1.5% | Feb 26, 2024 | ESPHome is a system to control your ESP8266/ESP32. A security misconfiguration in the edit configuration file API in the... |
| CVE-2024-27454 | HIGH | 7.5 | 1.2% | Feb 26, 2024 | orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. |
| CVE-2024-27359 | HIGH | 7.5 | 0.7% | Feb 26, 2024 | Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when proce... |
| CVE-2024-25909 | HIGH | 8.8 | 0.6% | Feb 26, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in JoomUnited WP Media folder.This issue affects WP Media ... |
| CVE-2024-24714 | HIGH | 7.2 | 0.6% | Feb 26, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons... |
| CVE-2024-23839 | HIGH | 8.1 | 0.8% | Feb 26, 2024 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P... |
| CVE-2024-23837 | HIGH | 7.5 | 1.2% | Feb 26, 2024 | LibHTP is a security-aware parser for the HTTP protocol. Crafted traffic can cause excessive processing time of HTTP hea... |
| CVE-2024-23836 | HIGH | 7.5 | 1.2% | Feb 26, 2024 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr... |
| CVE-2024-23835 | HIGH | 7.5 | 0.9% | Feb 26, 2024 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. P... |
| CVE-2024-22873 | HIGH | 8.1 | 0.7% | Feb 26, 2024 | Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subs... |
| CVE-2024-22371 | HIGH | 7.5 | 0.7% | Feb 26, 2024 | Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that expo... |
| CVE-2024-22201 | HIGH | 7.5 | 1.4% | Feb 26, 2024 | Jetty is a Java based web server and servlet engine. An HTTP/2 SSL connection that is established and TCP congested will... |
| CVE-2024-1889 | HIGH | 8.8 | 0.3% | Feb 26, 2024 | Cross-Site Request Forgery vulnerability in SMA Cluster Controller, affecting version 01.05.01.R. This vulnerability cou... |
| CVE-2024-1886 | HIGH | 8.8 | 0.8% | Feb 26, 2024 | This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage. |
| CVE-2024-1878 | HIGH | 8.8 | 0.6% | Feb 26, 2024 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by t... |
| CVE-2024-1877 | HIGH | 8.8 | 0.6% | Feb 26, 2024 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now