2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1673 | HIGH | 8.8 | 0.8% | Feb 21, 2024 | Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised th... |
| CVE-2024-1670 | HIGH | 8.8 | 9.0% | Feb 21, 2024 | Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2024-1669 | HIGH | 8.8 | 1.0% | Feb 21, 2024 | Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of... |
| CVE-2024-1108 | HIGH | 8.2 | 0.5% | Feb 21, 2024 | The Plugin Groups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch... |
| CVE-2024-23758 | HIGH | 7.5 | 0.5% | Feb 20, 2024 | An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise Manage... |
| CVE-2024-26136 | HIGH | 7.5 | 0.5% | Feb 20, 2024 | kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an accou... |
| CVE-2024-23830 | HIGH | 8.3 | 1.0% | Feb 20, 2024 | MantisBT is an open source issue tracker. Prior to version 2.26.1, an unauthenticated attacker who knows a user's email ... |
| CVE-2024-26135 | HIGH | 8.8 | 0.5% | Feb 20, 2024 | MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vu... |
| CVE-2024-24474 | HIGH | 8.8 | 1.4% | Feb 20, 2024 | QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA tra... |
| CVE-2024-22250 | HIGH | 7.8 | 0.3% | Feb 20, 2024 | Session Hijack vulnerability in Deprecated VMware Enhanced Authentication Plug-in could allow a malicious actor with unp... |
| CVE-2024-22054 | HIGH | 7.5 | 0.5% | Feb 20, 2024 | A malformed discovery packet sent by a malicious actor with preexisting access to the network could interrupt the functi... |
| CVE-2024-21682 | HIGH | 7.2 | 0.8% | Feb 20, 2024 | This High severity Injection vulnerability was introduced in Assets Discovery 1.0 - 6.2.0 (all versions). Assets Disco... |
| CVE-2024-21678 | HIGH | 8.5 | 0.5% | Feb 20, 2024 | This High severity Stored XSS vulnerability was introduced in version 2.7.0 of Confluence Data Center. This Stored XS... |
| CVE-2024-22369 | HIGH | 7.8 | 0.7% | Feb 20, 2024 | Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0... |
| CVE-2024-1156 | HIGH | 7.8 | 0.4% | Feb 20, 2024 | Incorrect directory permissions for the shared NI RabbitMQ service may allow a local authenticated user to read RabbitMQ... |
| CVE-2024-1155 | HIGH | 7.8 | 0.3% | Feb 20, 2024 | Incorrect permissions in the installation directories for shared SystemLink Elixir based services may allow an authentic... |
| CVE-2024-25199 | HIGH | 8.1 | 0.6% | Feb 20, 2024 | Inappropriate pointer order of map_sub_ and map_free(map_) (amcl_node.cpp) in Open Robotics Robotic Operating Sytstem 2 ... |
| CVE-2024-1557 | HIGH | 8.1 | 0.6% | Feb 20, 2024 | Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that w... |
| CVE-2024-1555 | HIGH | 8.3 | 0.5% | Feb 20, 2024 | When opening a website using the `firefox://` protocol handler, SameSite cookies were not properly respected. This vulne... |
| CVE-2024-1553 | HIGH | 8.1 | 0.9% | Feb 20, 2024 | Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence ... |
| CVE-2024-1552 | HIGH | 7.5 | 0.7% | Feb 20, 2024 | Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This... |
| CVE-2024-1546 | HIGH | 7.5 | 0.7% | Feb 20, 2024 | When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in a... |
| CVE-2024-26581 | HIGH | 7.8 | 2.2% | Feb 20, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: skip end interval elemen... |
| CVE-2024-25607 | HIGH | 7.5 | 0.3% | Feb 20, 2024 | The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupporte... |
| CVE-2024-25606 | HIGH | 8.7 | 0.5% | Feb 20, 2024 | XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before up... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now