2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-24825 | HIGH | 7.5 | 0.5% | Feb 9, 2024 | DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by an... |
| CVE-2024-24821 | HIGH | 7.8 | 0.3% | Feb 9, 2024 | Composer is a dependency Manager for the PHP language. In affected versions several files within the local working direc... |
| CVE-2024-24820 | HIGH | 8.3 | 0.4% | Feb 9, 2024 | Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configurat... |
| CVE-2024-24830 | HIGH | 8.8 | 0.7% | Feb 8, 2024 | OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at pet... |
| CVE-2024-23756 | HIGH | 7.5 | 0.6% | Feb 8, 2024 | The HTTP PUT and DELETE methods are enabled in the Plone official Docker version 5.2.13 (5221), allowing unauthenticated... |
| CVE-2024-23660 | HIGH | 7.5 | 0.6% | Feb 8, 2024 | The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezo... |
| CVE-2024-1329 | HIGH | 7.5 | 0.6% | Feb 8, 2024 | HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file wri... |
| CVE-2024-22795 | HIGH | 7 | 0.3% | Feb 8, 2024 | Insecure Permissions vulnerability in Forescout SecureConnector v.11.3.06.0063 allows a local attacker to escalate privi... |
| CVE-2024-24113 | HIGH | 8.8 | 0.6% | Feb 8, 2024 | xxl-job =< 2.4.1 has a Server-Side Request Forgery (SSRF) vulnerability, which causes low-privileged users to control ex... |
| CVE-2024-0985 | HIGH | 8 | 1.5% | Feb 8, 2024 | Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrar... |
| CVE-2024-23452 | HIGH | 7.5 | 1.6% | Feb 8, 2024 | Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle re... |
| CVE-2024-25148 | HIGH | 8.1 | 0.5% | Feb 8, 2024 | In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 be... |
| CVE-2024-24350 | HIGH | 8.8 | 1.2% | Feb 8, 2024 | File Upload vulnerability in Software Publico e-Sic Livre v.2.0 and before allows a remote attacker to execute arbitrary... |
| CVE-2024-24806 | HIGH | 7.3 | 2.0% | Feb 7, 2024 | libuv is a multi-platform support library with a focus on asynchronous I/O. The `uv_getaddrinfo` function in `src/unix/g... |
| CVE-2024-23448 | HIGH | 7.5 | 0.6% | Feb 7, 2024 | An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that index... |
| CVE-2024-24824 | HIGH | 8.8 | 34.5% | Feb 7, 2024 | Graylog is a free and open log management platform. Starting in version 2.0.0 and prior to versions 5.1.11 and 5.2.4, ar... |
| CVE-2024-20290 | HIGH | 7.5 | 33.6% | Feb 7, 2024 | A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a deni... |
| CVE-2024-20255 | HIGH | 7.1 | 0.6% | Feb 7, 2024 | A vulnerability in the SOAP API of Cisco Expressway Series and Cisco TelePresence Video Communication Server could allow... |
| CVE-2024-20254 | HIGH | 8.8 | 0.8% | Feb 7, 2024 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow ... |
| CVE-2024-20252 | HIGH | 8.8 | 0.8% | Feb 7, 2024 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow ... |
| CVE-2024-22012 | HIGH | 7.8 | 0.1% | Feb 7, 2024 | there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege ... |
| CVE-2024-25201 | HIGH | 7.5 | 0.7% | Feb 7, 2024 | Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at sr... |
| CVE-2024-25200 | HIGH | 7.5 | 0.7% | Feb 7, 2024 | Espruino 2v20 (commit fcc9ba4) was discovered to contain a Stack Overflow via the jspeFactorFunctionCall at src/jsparse.... |
| CVE-2024-1118 | HIGH | 8.8 | 0.7% | Feb 7, 2024 | The Podlove Subscribe button plugin for WordPress is vulnerable to UNION-based SQL Injection via the 'button' attribute ... |
| CVE-2024-24311 | HIGH | 7.5 | 0.7% | Feb 7, 2024 | Path Traversal vulnerability in Linea Grafica "Multilingual and Multistore Sitemap Pro - SEO" (lgsitemaps) module for Pr... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now