2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20812 | HIGH | 7.8 | 0.2% | Feb 6, 2024 | Out-of-bounds Write in padmd_vld_htbl of libpadm.so prior to SMR Feb-2024 Release 1 allows local attacker to execute arb... |
| CVE-2024-22773 | HIGH | 8.1 | 1.0% | Feb 6, 2024 | Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in C... |
| CVE-2024-24595 | HIGH | 7.1 | 0.3% | Feb 5, 2024 | Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a co... |
| CVE-2024-1072 | HIGH | 7.5 | 0.7% | Feb 5, 2024 | The Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode plugin for Wor... |
| CVE-2024-0761 | HIGH | 7.5 | 1.0% | Feb 5, 2024 | The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi... |
| CVE-2024-0709 | HIGH | 7.5 | 0.9% | Feb 5, 2024 | The Cryptocurrency Widgets – Price Ticker & Coins List plugin for WordPress is vulnerable to SQL Injection via the 'coin... |
| CVE-2024-0699 | HIGH | 7.2 | 1.2% | Feb 5, 2024 | The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file up... |
| CVE-2024-0668 | HIGH | 7.2 | 1.1% | Feb 5, 2024 | The Advanced Database Cleaner plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and incl... |
| CVE-2024-0428 | HIGH | 8.8 | 0.3% | Feb 5, 2024 | The Index Now plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6... |
| CVE-2024-0324 | HIGH | 7.5 | 2.4% | Feb 5, 2024 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is v... |
| CVE-2024-0221 | HIGH | 7.2 | 1.3% | Feb 5, 2024 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in ... |
| CVE-2024-1052 | HIGH | 8 | 0.3% | Feb 5, 2024 | Boundary and Boundary Enterprise (“Boundary”) is vulnerable to session hijacking through TLS certificate tampering. An a... |
| CVE-2024-22567 | HIGH | 8.8 | 17.8% | Feb 5, 2024 | File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/... |
| CVE-2024-24267 | HIGH | 7.5 | 1.6% | Feb 5, 2024 | gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_b... |
| CVE-2024-24266 | HIGH | 7.5 | 1.3% | Feb 5, 2024 | gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src... |
| CVE-2024-24265 | HIGH | 7.5 | 1.3% | Feb 5, 2024 | gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_int... |
| CVE-2024-24263 | HIGH | 7.5 | 0.7% | Feb 5, 2024 | Lotos WebServer v0.1.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the response_append_status_lin... |
| CVE-2024-24262 | HIGH | 7.5 | 0.7% | Feb 5, 2024 | media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_uac_stop_timer function a... |
| CVE-2024-24260 | HIGH | 7.5 | 0.7% | Feb 5, 2024 | media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function... |
| CVE-2024-24259 | HIGH | 7.5 | 1.1% | Feb 5, 2024 | freeglut through 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddMenuEntry functi... |
| CVE-2024-24258 | HIGH | 7.5 | 1.1% | Feb 5, 2024 | freeglut 3.4.0 was discovered to contain a memory leak via the menuEntry variable in the glutAddSubMenu function. |
| CVE-2024-24469 | HIGH | 8.8 | 0.5% | Feb 5, 2024 | Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th... |
| CVE-2024-24468 | HIGH | 8.8 | 0.5% | Feb 5, 2024 | Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th... |
| CVE-2024-24768 | HIGH | 7.5 | 0.3% | Feb 5, 2024 | 1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the p... |
| CVE-2024-24762 | HIGH | 7.5 | 1.5% | Feb 5, 2024 | `python-multipart` is a streaming multipart parser for Python. When using form data, `python-multipart` uses a Regular E... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now