2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25461 | HIGH | 7.5 | 1.0% | Feb 21, 2024 | Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain s... |
| CVE-2024-24479 | HIGH | 7.5 | 1.3% | Feb 21, 2024 | A Buffer Overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the wsutil/to_str.... |
| CVE-2024-24476 | HIGH | 7.5 | 1.3% | Feb 21, 2024 | A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resol... |
| CVE-2024-22473 | HIGH | 7.5 | 0.4% | Feb 21, 2024 | TRNG is used before initialization by ECDSA signing driver when exiting EM2/EM3 on Virtual Secure Vault (VSE) devices. T... |
| CVE-2024-25892 | HIGH | 8.1 | 0.6% | Feb 21, 2024 | ChurchCRM 5.5.0 ConfirmReport.php is vulnerable to Blind SQL Injection (Time-based) via the familyId GET parameter. |
| CVE-2024-25891 | HIGH | 7.5 | 0.6% | Feb 21, 2024 | ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection (Time-based) via the CurrentFundraiser GET paramete... |
| CVE-2024-1705 | HIGH | 8.1 | 0.6% | Feb 21, 2024 | A vulnerability was found in Shopwind up to 4.6. It has been rated as critical. This issue affects the function actionCr... |
| CVE-2024-1704 | HIGH | 8.1 | 0.6% | Feb 21, 2024 | A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical. This vulnerability affects the... |
| CVE-2024-26130 | HIGH | 7.5 | 0.8% | Feb 21, 2024 | cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in vers... |
| CVE-2024-24478 | HIGH | 7.5 | 1.0% | Feb 21, 2024 | An issue in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the packet-bgp.c, dissect_b... |
| CVE-2024-23346 | HIGH | 7.8 | 3.8% | Feb 21, 2024 | Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulner... |
| CVE-2024-20325 | HIGH | 7.1 | 0.1% | Feb 21, 2024 | A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attac... |
| CVE-2024-1714 | HIGH | 7.1 | 0.3% | Feb 21, 2024 | An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value... |
| CVE-2024-1708 | HIGH | 8.4 | 87.6% | Feb 21, 2024 | ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker t... |
| CVE-2024-26582 | HIGH | 7.8 | 0.3% | Feb 21, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and... |
| CVE-2024-22778 | HIGH | 7.5 | 0.7% | Feb 21, 2024 | HackMD CodiMD <2.5.2 is vulnerable to Denial of Service. |
| CVE-2024-24802 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in John Tendik JTRT Responsive Tables.This issue affects JTRT Responsive... |
| CVE-2024-24798 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in SoniNow Team Debug.This issue affects Debug: from n/a through 1.10. |
| CVE-2024-25904 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in David Stockl TinyMCE and TinyMCE Advanced Professsional Formats and S... |
| CVE-2024-24876 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor.This issue affects Admin Menu Editor: f... |
| CVE-2024-24872 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Themify Themify Builder.This issue affects Themify Builder: from n/a ... |
| CVE-2024-24849 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Mark Stockton Quicksand Post Filter jQuery Plugin.This issue affects ... |
| CVE-2024-24843 | HIGH | 8.8 | 0.2% | Feb 21, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in PowerPack Addons for Elementor PowerPack Pro for Elementor.This issue... |
| CVE-2024-1675 | HIGH | 8.8 | 10.4% | Feb 21, 2024 | Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass ... |
| CVE-2024-1674 | HIGH | 8.8 | 0.8% | Feb 21, 2024 | Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass n... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now