2024 CVE Vulnerabilities

39,270 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-24304HIGH7.5In the module "Mailjet" (mailjet) from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical info...
CVE-2024-24810HIGH7.8WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folde...
CVE-2024-22022HIGH8.8Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to a...
CVE-2024-22388HIGH7.8Certain configuration available in the communication channel for encoders could expose sensitive data when reader config...
CVE-2024-24680HIGH7.5An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2. The intcomma templa...
CVE-2024-24575HIGH7.5libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing...
CVE-2024-22520HIGH8.2An issue discovered in Dronetag Drone Scanner 1.5.2 allows attackers to impersonate other drones via transmission of cra...
CVE-2024-22519HIGH8.2An issue discovered in OpenDroneID OSM 3.5.1 allows attackers to impersonate other drones via transmission of crafted da...
CVE-2024-22515HIGH8.8Unrestricted File Upload vulnerability in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to upload arbitrary files v...
CVE-2024-22514HIGH8.8An issue discovered in iSpyConnect.com Agent DVR 5.1.6.0 allows attackers to run arbitrary files by restoring a crafted ...
CVE-2024-22239HIGH7.8Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Ope...
CVE-2024-22237HIGH7.8Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Ope...
CVE-2024-1255HIGH7.5A vulnerability has been found in sepidz SepidzDigitalMenu up to 7.1.0728.1 and classified as problematic. This vulnerab...
CVE-2024-1254HIGH7.2A vulnerability, which was classified as critical, was found in Byzoro Smart S20 Management Platform up to 20231120. Thi...
CVE-2024-1253HIGH7.2A vulnerability, which was classified as critical, has been found in Byzoro Smart S40 Management Platform up to 20240126...
CVE-2024-24593HIGH8.8A cross-site request forgery (CSRF) vulnerability in all versions up to 1.14.1 of the api server component of Allegro AI...
CVE-2024-24591HIGH8.8A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a ...
CVE-2024-24590HIGH8.8Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platf...
CVE-2024-23673HIGH7.5Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affe...
CVE-2024-23304HIGH7.5Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) co...
CVE-2024-20820HIGH7.1Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Ou...
CVE-2024-20819HIGH7.8Out-of-bounds Write vulnerabilities in svc1td_vld_plh_ap of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local at...
CVE-2024-20818HIGH7.8Out-of-bounds Write vulnerabilities in svc1td_vld_elh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attac...
CVE-2024-20817HIGH7.8Out-of-bounds Write vulnerabilities in svc1td_vld_slh of libsthmbc.so prior to SMR Feb-2024 Release 1 allows local attac...
CVE-2024-20813HIGH7.8Out-of-bounds Write in padmd_vld_qtbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arb...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now