2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-25165 | HIGH | 7.8 | 0.5% | Feb 14, 2024 | A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex. |
| CVE-2024-25301 | HIGH | 7.2 | 1.5% | Feb 14, 2024 | Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.... |
| CVE-2024-0008 | HIGH | 8.8 | 0.5% | Feb 14, 2024 | Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, maki... |
| CVE-2024-24990 | HIGH | 7.5 | 0.9% | Feb 14, 2024 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker p... |
| CVE-2024-24989 | HIGH | 7.5 | 1.1% | Feb 14, 2024 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker p... |
| CVE-2024-24775 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traf... |
| CVE-2024-23982 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Tr... |
| CVE-2024-23979 | HIGH | 7.5 | 0.3% | Feb 14, 2024 | When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is co... |
| CVE-2024-23805 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility an... |
| CVE-2024-23314 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management M... |
| CVE-2024-23308 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, un... |
| CVE-2024-23306 | HIGH | 7.1 | 0.2% | Feb 14, 2024 | A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: S... |
| CVE-2024-22389 | HIGH | 7.2 | 0.5% | Feb 14, 2024 | When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to... |
| CVE-2024-22093 | HIGH | 8.7 | 0.8% | Feb 14, 2024 | When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iContro... |
| CVE-2024-21849 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed tra... |
| CVE-2024-21789 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an i... |
| CVE-2024-21771 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic agai... |
| CVE-2024-21763 | HIGH | 7.5 | 0.5% | Feb 14, 2024 | When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclose... |
| CVE-2024-0568 | HIGH | 8.8 | 0.3% | Feb 14, 2024 | CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration o... |
| CVE-2024-25213 | HIGH | 7.2 | 0.7% | Feb 14, 2024 | Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php... |
| CVE-2024-25212 | HIGH | 7.2 | 0.7% | Feb 14, 2024 | Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.p... |
| CVE-2024-23789 | HIGH | 8.8 | 1.2% | Feb 14, 2024 | Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent una... |
| CVE-2024-23788 | HIGH | 8.1 | 0.8% | Feb 14, 2024 | Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.... |
| CVE-2024-23783 | HIGH | 8.8 | 0.5% | Feb 14, 2024 | Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 ... |
| CVE-2024-24697 | HIGH | 7.8 | 0.3% | Feb 14, 2024 | Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of pr... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now