2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20917 | HIGH | 7.5 | 0.4% | Feb 17, 2024 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Log Manage... |
| CVE-2024-20909 | HIGH | 7.5 | 0.4% | Feb 17, 2024 | Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a... |
| CVE-2024-25628 | HIGH | 7.6 | 0.4% | Feb 16, 2024 | Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access t... |
| CVE-2024-25083 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiat... |
| CVE-2024-0023 | HIGH | 7.8 | 0.4% | Feb 16, 2024 | In ConvertRGBToPlanarYUV of Codec2BufferUtils.cpp, there is a possible out of bounds write due to an incorrect bounds ch... |
| CVE-2024-0021 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way for an app in the work profile to en... |
| CVE-2024-0018 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overf... |
| CVE-2024-21915 | HIGH | 8.8 | 1.0% | Feb 16, 2024 | A privilege escalation vulnerability exists in Rockwell Automation FactoryTalk® Service Platform (FTSP). If exploited, ... |
| CVE-2024-0015 | HIGH | 7.8 | 0.4% | Feb 16, 2024 | In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to ... |
| CVE-2024-21775 | HIGH | 8.8 | 5.0% | Feb 16, 2024 | Zoho ManageEngine Exchange Reporter Plus versions 5714 and below are vulnerable to the Authenticated SQL injection in re... |
| CVE-2024-25466 | HIGH | 7.8 | 0.5% | Feb 16, 2024 | Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local att... |
| CVE-2024-25415 | HIGH | 7.2 | 27.2% | Feb 16, 2024 | A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to ex... |
| CVE-2024-25413 | HIGH | 7.2 | 1.5% | Feb 16, 2024 | A XSLT Server Side injection vulnerability in the Import Jobs function of FireBear Improved Import And Export v3.8.6 all... |
| CVE-2024-0041 | HIGH | 7 | 0.1% | Feb 16, 2024 | In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error... |
| CVE-2024-0040 | HIGH | 7.5 | 2.0% | Feb 16, 2024 | In setParameter of MtpPacket.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead ... |
| CVE-2024-0038 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injectio... |
| CVE-2024-0036 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on s... |
| CVE-2024-0035 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In onNullBinding of TileLifecycleManager.java, there is a possible way to launch an activity from the background due to ... |
| CVE-2024-0034 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In BackgroundLaunchProcessController, there is a possible way to launch arbitrary activity from the background due to BA... |
| CVE-2024-0033 | HIGH | 7.8 | 0.2% | Feb 16, 2024 | In multiple functions of ashmem-dev.cpp, there is a possible missing seal due to a heap buffer overflow. This could lead... |
| CVE-2024-0029 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic ... |
| CVE-2024-0014 | HIGH | 7.8 | 0.1% | Feb 16, 2024 | In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error... |
| CVE-2024-25123 | HIGH | 7.5 | 0.5% | Feb 15, 2024 | MSS (Mission Support System) is an open source package designed for planning atmospheric research flights. In file: `ind... |
| CVE-2024-23478 | HIGH | 8 | 81.6% | Feb 15, 2024 | SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploite... |
| CVE-2024-0622 | HIGH | 7.8 | 0.1% | Feb 15, 2024 | Local privilege escalation vulnerability affects OpenText Operations Agent product versions 12.15 and 12.20-12.25 when i... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now