2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8596 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Writ... |
| CVE-2024-8595 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulner... |
| CVE-2024-8594 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow v... |
| CVE-2024-8593 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted CATPART file, when parsed in ASMKERN230A.dll through Autodesk AutoCAD, may force an Out-of-Bounds ... |
| CVE-2024-8592 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corrupti... |
| CVE-2024-8591 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer O... |
| CVE-2024-8590 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerabil... |
| CVE-2024-8589 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read v... |
| CVE-2024-8588 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read v... |
| CVE-2024-7992 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Sta... |
| CVE-2024-7991 | HIGH | 7.8 | 0.2% | Oct 29, 2024 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Ou... |
| CVE-2024-50454 | MEDIUM | 5.3 | 0.3% | Oct 29, 2024 | Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Acce... |
| CVE-2024-50428 | CRITICAL | 9.8 | 0.3% | Oct 29, 2024 | Missing Authorization vulnerability in mondula2016 Multi Step Form multi-step-form allows Exploiting Incorrectly Configu... |
| CVE-2024-50425 | MEDIUM | 6.5 | 0.4% | Oct 29, 2024 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roland Murg WP Booking Syste... |
| CVE-2024-50424 | MEDIUM | 6.5 | 0.4% | Oct 29, 2024 | Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access... |
| CVE-2024-50423 | MEDIUM | 5.4 | 0.4% | Oct 29, 2024 | Missing Authorization vulnerability in WPDeveloper Templately templately allows Exploiting Incorrectly Configured Access... |
| CVE-2024-50422 | MEDIUM | 5.3 | 0.5% | Oct 29, 2024 | Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2024-50421 | MEDIUM | 5.3 | 0.4% | Oct 29, 2024 | Missing Authorization vulnerability in WP Overnight WooCommerce PDF Invoices & Packing Slips woocommerce-pdf-invoices-pa... |
| CVE-2024-48573 | CRITICAL | 9.8 | 1.0% | Oct 29, 2024 | A NoSQL injection vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to reset user and admin... |
| CVE-2024-48572 | MEDIUM | 5.3 | 0.4% | Oct 29, 2024 | A User enumeration vulnerability in AquilaCMS 1.409.20 and prior allows unauthenticated attackers to obtain email addres... |
| CVE-2024-48138 | CRITICAL | 9.8 | 0.8% | Oct 29, 2024 | A remote code execution (RCE) vulnerability in the component /PluXml/core/admin/parametres_edittpl.php of PluXml v5.8.16... |
| CVE-2024-44081 | CRITICAL | 9.8 | 0.7% | Oct 29, 2024 | In Jitsi Meet before 2.0.9779, the functionality to share a video file was implemented in an insecure way, resulting in ... |
| CVE-2024-44080 | HIGH | 7.5 | 0.5% | Oct 29, 2024 | In Jitsi Meet before 2.0.9779, the functionality to share an image using giphy was implemented in an insecure way, resul... |
| CVE-2024-10488 | HIGH | 8.8 | 0.5% | Oct 29, 2024 | Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap c... |
| CVE-2024-10487 | HIGH | 8.8 | 0.7% | Oct 29, 2024 | Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds m... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now