2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22243 | HIGH | 8.1 | 4.0% | Feb 23, 2024 | Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perf... |
| CVE-2024-1786 | HIGH | 7.5 | 2.7% | Feb 23, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 ... |
| CVE-2024-1683 | HIGH | 7.3 | 0.3% | Feb 23, 2024 | A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application fil... |
| CVE-2024-25756 | HIGH | 8 | 0.6% | Feb 22, 2024 | A Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote... |
| CVE-2024-25753 | HIGH | 8.8 | 0.6% | Feb 22, 2024 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote a... |
| CVE-2024-25748 | HIGH | 8.8 | 0.6% | Feb 22, 2024 | A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a re... |
| CVE-2024-25746 | HIGH | 8.8 | 0.4% | Feb 22, 2024 | Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote a... |
| CVE-2024-1750 | HIGH | 8.1 | 0.8% | Feb 22, 2024 | A vulnerability, which was classified as critical, was found in TemmokuMVC up to 2.3. Affected is the function get_img_u... |
| CVE-2024-1748 | HIGH | 7.5 | 0.7% | Feb 22, 2024 | A vulnerability classified as critical was found in van_der_Schaar LAB AutoPrognosis 0.1.21. This vulnerability affects ... |
| CVE-2024-26592 | HIGH | 7.8 | 0.8% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ... |
| CVE-2024-26589 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS... |
| CVE-2024-26588 | HIGH | 7.8 | 0.2% | Feb 22, 2024 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Prevent out-of-bounds memory access... |
| CVE-2024-26283 | HIGH | 7.8 | 0.3% | Feb 22, 2024 | An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external... |
| CVE-2024-26282 | HIGH | 7.1 | 0.3% | Feb 22, 2024 | Using an AMP url with a canonical element, an attacker could have executed JavaScript from an opened bookmarked page. Th... |
| CVE-2024-25851 | HIGH | 8 | 1.9% | Feb 22, 2024 | Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in... |
| CVE-2024-1563 | HIGH | 8.1 | 0.4% | Feb 22, 2024 | An attacker could have executed unauthorized scripts on top origin sites using a JavaScript URI when opening an external... |
| CVE-2024-26352 | HIGH | 8.8 | 0.3% | Feb 22, 2024 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places... |
| CVE-2024-26350 | HIGH | 8.8 | 0.3% | Feb 22, 2024 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_con... |
| CVE-2024-23094 | HIGH | 8.8 | 0.3% | Feb 22, 2024 | Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_med... |
| CVE-2024-25021 | HIGH | 8.4 | 0.3% | Feb 22, 2024 | IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execut... |
| CVE-2024-1104 | HIGH | 7.5 | 0.7% | Feb 22, 2024 | An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all us... |
| CVE-2024-0220 | HIGH | 8.1 | 0.4% | Feb 22, 2024 | B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the... |
| CVE-2024-27283 | HIGH | 7.2 | 0.7% | Feb 22, 2024 | A vulnerability was discovered in Veritas eDiscovery Platform before 10.2.5. The application administrator can upload po... |
| CVE-2024-26483 | HIGH | 8.8 | 1.0% | Feb 22, 2024 | An arbitrary file upload vulnerability in the Profile Image module of Kirby CMS v4.1.0 allows attackers to execute arbit... |
| CVE-2024-26482 | HIGH | 7.1 | 0.3% | Feb 22, 2024 | An HTML injection vulnerability exists in the Edit Content Layout module of Kirby CMS v4.1.0. NOTE: the vendor disputes ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now