2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1608 | HIGH | 7.5 | 0.5% | Feb 20, 2024 | In OPPO Usercenter Credit SDK, there's a possible escalation of privilege due to loose permission check, This could lead... |
| CVE-2024-22234 | HIGH | 7.4 | 0.7% | Feb 20, 2024 | In Spring Security, versions 6.1.x prior to 6.1.7 and versions 6.2.x prior to 6.2.2, an application is vulnerable to bro... |
| CVE-2024-22019 | HIGH | 7.5 | 3.2% | Feb 20, 2024 | A vulnerability in Node.js HTTP servers allows an attacker to send a specially crafted HTTP request with chunked encodin... |
| CVE-2024-21892 | HIGH | 7.8 | 0.6% | Feb 20, 2024 | On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pro... |
| CVE-2024-21891 | HIGH | 8.8 | 1.2% | Feb 20, 2024 | Node.js depends on multiple built-in utility functions to normalize paths provided to node:fs functions, which can be ov... |
| CVE-2024-1648 | HIGH | 7.5 | 0.7% | Feb 20, 2024 | electron-pdf version 20.0.0 allows an external attacker to remotely obtain arbitrary local files. This is possible beca... |
| CVE-2024-1647 | HIGH | 7.5 | 0.7% | Feb 20, 2024 | Pyhtml2pdf version 0.0.6 allows an external attacker to remotely obtain arbitrary local files. This is possible because... |
| CVE-2024-1644 | HIGH | 8.8 | 0.9% | Feb 20, 2024 | Suite CRM version 7.14.2 allows including local php files. This is possible because the application is vulnerable to LF... |
| CVE-2024-1297 | HIGH | 7.2 | 2.8% | Feb 20, 2024 | Loomio version 2.22.0 allows executing arbitrary commands on the server. This is possible because the application is vu... |
| CVE-2024-26134 | HIGH | 7.5 | 1.2% | Feb 19, 2024 | cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format... |
| CVE-2024-1635 | HIGH | 7.5 | 4.6% | Feb 19, 2024 | A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protoco... |
| CVE-2024-25636 | HIGH | 8.8 | 0.7% | Feb 19, 2024 | Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when... |
| CVE-2024-25635 | HIGH | 8.8 | 0.7% | Feb 19, 2024 | alf.io is an open source ticket reservation system. Prior to version 2.0-Mr-2402, organization owners can view the gener... |
| CVE-2024-25982 | HIGH | 8.8 | 0.5% | Feb 19, 2024 | The link to update all installed language packs did not include the necessary token to prevent a CSRF risk. |
| CVE-2024-25978 | HIGH | 7.5 | 0.9% | Feb 19, 2024 | Insufficient file size checks resulted in a denial of service risk in the file picker's unzip functionality. |
| CVE-2024-25623 | HIGH | 7.7 | 0.5% | Feb 19, 2024 | Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.2.7, 4.1.15, 4.0.15, and... |
| CVE-2024-1580 | HIGH | 8.8 | 1.8% | Feb 19, 2024 | An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to mem... |
| CVE-2024-25468 | HIGH | 7.5 | 0.9% | Feb 17, 2024 | An issue in TOTOLINK X5000R V.9.1.0u.6369_B20230113 allows a remote attacker to cause a denial of service via the host_t... |
| CVE-2024-25298 | HIGH | 7.2 | 1.1% | Feb 17, 2024 | An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive inform... |
| CVE-2024-21492 | HIGH | 8.1 | 0.7% | Feb 17, 2024 | All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to ... |
| CVE-2024-22727 | HIGH | 8.3 | 0.3% | Feb 17, 2024 | Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability... |
| CVE-2024-20956 | HIGH | 7.3 | 0.4% | Feb 17, 2024 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: In... |
| CVE-2024-20953 | HIGH | 8.8 | 3.4% | Feb 17, 2024 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The supported version that i... |
| CVE-2024-20931 | HIGH | 7.5 | 59.7% | Feb 17, 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t... |
| CVE-2024-20927 | HIGH | 8.6 | 0.5% | Feb 17, 2024 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now