2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22667 | HIGH | 7.8 | 0.6% | Feb 5, 2024 | Vim before 9.0.2142 has a stack-based buffer overflow because did_set_langmap in map.c calls sprintf to write to the err... |
| CVE-2024-20015 | HIGH | 7.8 | 0.1% | Feb 5, 2024 | In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalati... |
| CVE-2024-20009 | HIGH | 8.8 | 0.4% | Feb 5, 2024 | In alac decoder, there is a possible out of bounds write due to an incorrect error handling. This could lead to remote e... |
| CVE-2024-20007 | HIGH | 7.5 | 0.3% | Feb 5, 2024 | In mp3 decoder, there is a possible out of bounds write due to a race condition. This could lead to remote escalation of... |
| CVE-2024-20004 | HIGH | 7.5 | 1.2% | Feb 5, 2024 | In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of ... |
| CVE-2024-20003 | HIGH | 7.5 | 1.1% | Feb 5, 2024 | In Modem NL1, there is a possible system crash due to an improper input validation. This could lead to remote denial of ... |
| CVE-2024-25062 | HIGH | 7.5 | 1.2% | Feb 4, 2024 | An issue was discovered in libxml2 before 2.11.7 and 2.12.x before 2.12.5. When using the XML Reader interface with DTD ... |
| CVE-2024-1064 | HIGH | 7.5 | 0.8% | Feb 3, 2024 | A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticate... |
| CVE-2024-0909 | HIGH | 7.5 | 0.6% | Feb 3, 2024 | The Anonymous Restricted Content plugin for WordPress is vulnerable to information disclosure in all versions up to, and... |
| CVE-2024-1199 | HIGH | 7.5 | 0.7% | Feb 3, 2024 | A vulnerability has been found in CodeAstro Employee Task Management System 1.0 and classified as problematic. Affected ... |
| CVE-2024-1189 | HIGH | 7.5 | 0.7% | Feb 2, 2024 | A vulnerability has been found in AMPPS 2.7 and classified as problematic. Affected by this vulnerability is an unknown ... |
| CVE-2024-24760 | HIGH | 7.3 | 0.9% | Feb 2, 2024 | mailcow is a dockerized email package, with multiple containers linked in one bridged network. A security vulnerability ... |
| CVE-2024-24470 | HIGH | 8.8 | 0.5% | Feb 2, 2024 | Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via th... |
| CVE-2024-24161 | HIGH | 7.5 | 0.7% | Feb 2, 2024 | MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not fil... |
| CVE-2024-23831 | HIGH | 7.5 | 0.3% | Feb 2, 2024 | LedgerSMB is a free web-based double-entry accounting system. When a LedgerSMB database administrator has an active sess... |
| CVE-2024-22107 | HIGH | 7.2 | 2.5% | Feb 2, 2024 | An issue was discovered in GTB Central Console 15.17.1-30814.NG. The method systemSettingsDnsDataAction at /opt/webapp/s... |
| CVE-2024-0269 | HIGH | 8.8 | 5.4% | Feb 2, 2024 | ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in File-Summary Dril... |
| CVE-2024-0253 | HIGH | 8.8 | 5.0% | Feb 2, 2024 | ManageEngine ADAudit Plus versions 7270 and below are vulnerable to the Authenticated SQL injection in home Graph-Data. |
| CVE-2024-1201 | HIGH | 7.8 | 0.2% | Feb 2, 2024 | Search path or unquoted item vulnerability in HDD Health affecting versions 4.2.0.112 and earlier. This vulnerability co... |
| CVE-2024-0844 | HIGH | 7.2 | 0.7% | Feb 2, 2024 | The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress is vulnerable to Local File Inclusion in ... |
| CVE-2024-22851 | HIGH | 7.5 | 1.2% | Feb 2, 2024 | Directory Traversal Vulnerability in LiveConfig before v.2.5.2 allows a remote attacker to obtain sensitive information ... |
| CVE-2024-24524 | HIGH | 8.8 | 0.5% | Feb 2, 2024 | Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code... |
| CVE-2024-21860 | HIGH | 8.8 | 0.4% | Feb 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use a... |
| CVE-2024-21851 | HIGH | 7.8 | 0.2% | Feb 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow. |
| CVE-2024-21845 | HIGH | 7.8 | 0.2% | Feb 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now