2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-0166 | HIGH | 7.8 | 1.1% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_tcpdump utility. An authen... |
| CVE-2024-0165 | HIGH | 7.8 | 1.0% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_acldb_dump utility. An aut... |
| CVE-2024-0164 | HIGH | 7.8 | 1.1% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contain an OS Command Injection Vulnerability in its svc_topstats utility. An authen... |
| CVE-2024-0566 | HIGH | 7.2 | 3.3% | Feb 12, 2024 | The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a ... |
| CVE-2024-24935 | HIGH | 8.8 | 0.2% | Feb 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WpSimpleTools Basic Log Viewer.This issue affects Basic Log Viewer: f... |
| CVE-2024-24929 | HIGH | 8.8 | 0.2% | Feb 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Ryan Duff, Peter Westwood WP Contact Form.This issue affects WP Conta... |
| CVE-2024-24887 | HIGH | 8.8 | 0.2% | Feb 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Contest Gallery Photos and Files Contest Gallery – Contact Form, Uplo... |
| CVE-2024-24884 | HIGH | 8.8 | 0.2% | Feb 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in ARI Soft Contact Form 7 Connector.This issue affects Contact Form 7 C... |
| CVE-2024-24875 | HIGH | 8.8 | 0.2% | Feb 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Yannick Lefebvre Link Library.This issue affects Link Library: from n... |
| CVE-2024-24926 | HIGH | 8.8 | 1.1% | Feb 12, 2024 | Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress T... |
| CVE-2024-24796 | HIGH | 8.8 | 0.5% | Feb 12, 2024 | Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooComme... |
| CVE-2024-25744 | HIGH | 8.8 | 0.3% | Feb 12, 2024 | In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is relate... |
| CVE-2024-25728 | HIGH | 7.5 | 0.7% | Feb 11, 2024 | ExpressVPN before 12.73.0 on Windows, when split tunneling is used, sends DNS requests according to the Windows configur... |
| CVE-2024-25419 | HIGH | 8.8 | 0.3% | Feb 11, 2024 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_men... |
| CVE-2024-25418 | HIGH | 8.8 | 0.3% | Feb 11, 2024 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_men... |
| CVE-2024-25417 | HIGH | 8.8 | 0.3% | Feb 11, 2024 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_transl... |
| CVE-2024-22313 | HIGH | 7.8 | 0.1% | Feb 10, 2024 | IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, ... |
| CVE-2024-22361 | HIGH | 7.5 | 0.3% | Feb 10, 2024 | IBM Semeru Runtime 8.0.302.0 through 8.0.392.0, 11.0.12.0 through 11.0.21.0, 17.0.1.0 - 17.0.9.0, and 21.0.1.0 uses weak... |
| CVE-2024-0594 | HIGH | 8.8 | 0.6% | Feb 10, 2024 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to union-based SQL Injectio... |
| CVE-2024-21490 | HIGH | 7.5 | 1.8% | Feb 10, 2024 | This affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular express... |
| CVE-2024-24828 | HIGH | 7.8 | 0.2% | Feb 9, 2024 | pkg is tool design to bundle Node.js projects into an executables. Any native code packages built by `pkg` are written t... |
| CVE-2024-23327 | HIGH | 7.5 | 0.7% | Feb 9, 2024 | Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, t... |
| CVE-2024-23325 | HIGH | 7.5 | 0.8% | Feb 9, 2024 | Envoy is a high-performance edge/middle/service proxy. Envoy crashes in Proxy protocol when using an address type that i... |
| CVE-2024-23324 | HIGH | 7.5 | 0.6% | Feb 9, 2024 | Envoy is a high-performance edge/middle/service proxy. External authentication can be bypassed by downstream connections... |
| CVE-2024-23322 | HIGH | 7.5 | 0.7% | Feb 9, 2024 | Envoy is a high-performance edge/middle/service proxy. Envoy will crash when certain timeouts happen within the same int... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now