2024 CVE Vulnerabilities

39,270 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-1404HIGH7.5A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unkno...
CVE-2024-25450HIGH8.8imlib2 v1.9.1 was discovered to mishandle memory allocation in the function init_imlib_fonts().
CVE-2024-25448HIGH8.8An issue in the imlib_free_image_and_decache function of imlib2 v1.9.1 allows attackers to cause a heap buffer overflow ...
CVE-2024-25447HIGH8.8An issue in the imlib_load_image_with_error_return function of imlib2 v1.9.1 allows attackers to cause a heap buffer ove...
CVE-2024-25446HIGH7.8An issue in the HuginBase::PTools::setDestImage function of Hugin v2022.0.0 allows attackers to cause a heap buffer over...
CVE-2024-25445HIGH7.8Improper handling of values in HuginBase::PTools::Transform::transform of Hugin 2022.0.0 leads to an assertion failure.
CVE-2024-25443HIGH7.8An issue in the HuginBase::ImageVariable<double>::linkWith function of Hugin v2022.0.0 allows attackers to cause a heap-...
CVE-2024-25442HIGH7.8An issue in the HuginBase::PanoramaMemento::loadPTScript function of Hugin v2022.0.0 allows attackers to cause a heap bu...
CVE-2024-25318HIGH8.8Code-projects Hotel Managment System 1.0 allows SQL Injection via the 'pid' parameter in Hotel/admin/print.php?pid=2.
CVE-2024-25310HIGH8.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/delete.php?id=5....
CVE-2024-25313HIGH8.8Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters a...
CVE-2024-25312HIGH8.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at "School/sub_delete.php?i...
CVE-2024-25309HIGH8.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.p...
CVE-2024-25308HIGH8.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.p...
CVE-2024-25306HIGH8.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at "School/index.php".
CVE-2024-25305HIGH8.8Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters a...
CVE-2024-25304HIGH8.8Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at "School/index.php."
CVE-2024-25677HIGH8.8In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly ...
CVE-2024-23749HIGH7.8KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insuffic...
CVE-2024-25004HIGH7.8KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insuf...
CVE-2024-25003HIGH7.8KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insuf...
CVE-2024-0229HIGH7.8An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a...
CVE-2024-0842HIGH7.5The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Denial of Service in all version...
CVE-2024-24819HIGH8.8icingaweb2-module-incubator is a working project of bleeding edge Icinga Web 2 libraries. In affected versions the class...
CVE-2024-23639HIGH7.8Micronaut Framework is a modern, JVM-based, full stack Java framework designed for building modular, easily testable JVM...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now