2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1875 | HIGH | 8.8 | 0.9% | Feb 26, 2024 | A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. This issue affec... |
| CVE-2024-1758 | HIGH | 8.1 | 0.5% | Feb 26, 2024 | The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, an... |
| CVE-2024-1710 | HIGH | 8.8 | 0.7% | Feb 26, 2024 | The Addon Library plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on... |
| CVE-2024-1622 | HIGH | 7.5 | 1.0% | Feb 26, 2024 | Due to a mistake in error checking, Routinator will terminate when an incoming RTR connection is reset by the peer too q... |
| CVE-2024-0455 | HIGH | 7.5 | 0.8% | Feb 26, 2024 | The inclusion of the web scraper for AnythingLLM means that any user with the proper authorization level (manager, admin... |
| CVE-2024-0439 | HIGH | 8.8 | 0.6% | Feb 26, 2024 | As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience fo... |
| CVE-2024-0243 | HIGH | 8.1 | 0.5% | Feb 26, 2024 | With the following crawler configuration: ```python from bs4 import BeautifulSoup as Soup url = "https://example.com" ... |
| CVE-2024-21502 | HIGH | 7.5 | 1.0% | Feb 24, 2024 | Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the cur... |
| CVE-2024-26192 | HIGH | 8.2 | 1.5% | Feb 23, 2024 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2024-25469 | HIGH | 7.5 | 0.8% | Feb 23, 2024 | SQL Injection vulnerability in CRMEB crmeb_java v.1.3.4 and before allows a remote attacker to obtain sensitive informat... |
| CVE-2024-24310 | HIGH | 8.8 | 0.5% | Feb 23, 2024 | In the module "Generate barcode on invoice / delivery slip" (ecgeneratebarcode) from Ether Creation <= 1.2.0 for PrestaS... |
| CVE-2024-24309 | HIGH | 7.5 | 0.6% | Feb 23, 2024 | In the module "Survey TMA" (ecomiz_survey_tma) up to version 2.0.0 from Ecomiz for PrestaShop, a guest can download pers... |
| CVE-2024-27318 | HIGH | 7.5 | 1.2% | Feb 23, 2024 | Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the external_data fiel... |
| CVE-2024-23320 | HIGH | 8.8 | 1.4% | Feb 23, 2024 | Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandbox... |
| CVE-2024-26150 | HIGH | 7.5 | 0.8% | Feb 23, 2024 | `@backstage/backend-common` is a common functionality library for backends for Backstage, an open platform for building ... |
| CVE-2024-1821 | HIGH | 8.8 | 0.5% | Feb 23, 2024 | A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects... |
| CVE-2024-26599 | HIGH | 7.8 | 0.3% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: pwm: Fix out-of-bounds access in of_pwm_single_xlat... |
| CVE-2024-26598 | HIGH | 7.8 | 0.2% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Avoid potential UAF in LPI tr... |
| CVE-2024-26597 | HIGH | 7.1 | 0.3% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix global oob in rmnet_polic... |
| CVE-2024-1819 | HIGH | 7.2 | 0.7% | Feb 23, 2024 | A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affect... |
| CVE-2024-1818 | HIGH | 7.2 | 0.7% | Feb 23, 2024 | A vulnerability was found in CodeAstro Membership Management System 1.0 and classified as critical. Affected by this iss... |
| CVE-2024-26594 | HIGH | 7.1 | 78.4% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If cli... |
| CVE-2024-25915 | HIGH | 8.8 | 0.3% | Feb 23, 2024 | Server-Side Request Forgery (SSRF) vulnerability in Raaj Trambadia Pexels: Free Stock Photos.This issue affects Pexels: ... |
| CVE-2024-26593 | HIGH | 7.1 | 0.3% | Feb 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Fix block process call transactions Acc... |
| CVE-2024-1776 | HIGH | 7.2 | 0.6% | Feb 23, 2024 | The Admin side data storage for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'form-id' par... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now