2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22523 | HIGH | 7.5 | 1.1% | Jan 30, 2024 | Directory Traversal vulnerability in Qiyu iFair version 23.8_ad0 and before, allows remote attackers to obtain sensitive... |
| CVE-2024-21803 | HIGH | 7.8 | 0.5% | Jan 30, 2024 | Use After Free vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (bluetooth modules) allows Local Execution ... |
| CVE-2024-21840 | HIGH | 7.1 | 0.1% | Jan 30, 2024 | Incorrect Default Permissions vulnerability in Hitachi Storage Plug-in for VMware vCenter allows local users to read and... |
| CVE-2024-22938 | HIGH | 7.8 | 0.3% | Jan 30, 2024 | Insecure Permissions vulnerability in BossCMS v.1.3.0 allows a local attacker to execute arbitrary code and escalate pri... |
| CVE-2024-23334 | HIGH | 7.5 | 76.9% | Jan 29, 2024 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and c... |
| CVE-2024-24140 | HIGH | 7.2 | 1.2% | Jan 29, 2024 | Sourcecodester Daily Habit Tracker App 1.0 allows SQL Injection via the parameter 'tracker.' |
| CVE-2024-24139 | HIGH | 7.2 | 1.2% | Jan 29, 2024 | Sourcecodester Login System with Email Verification 1.0 allows SQL Injection via the 'user' parameter. |
| CVE-2024-23940 | HIGH | 7.8 | 0.6% | Jan 29, 2024 | Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and be... |
| CVE-2024-1017 | HIGH | 7.5 | 1.4% | Jan 29, 2024 | A vulnerability was found in Gabriels FTP Server 1.2. It has been rated as problematic. This issue affects some unknown ... |
| CVE-2024-1016 | HIGH | 7.5 | 1.4% | Jan 29, 2024 | A vulnerability was found in Solar FTP Server 2.1.1/2.1.2. It has been declared as problematic. This vulnerability affec... |
| CVE-2024-23828 | HIGH | 8.8 | 1.1% | Jan 29, 2024 | Nginx-UI is a web interface to manage Nginx configurations. It is vulnerable to an authenticated arbitrary command execu... |
| CVE-2024-1011 | HIGH | 8.8 | 0.6% | Jan 29, 2024 | A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability... |
| CVE-2024-1008 | HIGH | 7.2 | 0.8% | Jan 29, 2024 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been declared as critical. Affected b... |
| CVE-2024-1007 | HIGH | 7.2 | 0.6% | Jan 29, 2024 | A vulnerability was found in SourceCodester Employee Management System 1.0. It has been classified as critical. Affected... |
| CVE-2024-1005 | HIGH | 7.5 | 0.9% | Jan 29, 2024 | A vulnerability has been found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This vulner... |
| CVE-2024-1004 | HIGH | 7.2 | 1.3% | Jan 29, 2024 | A vulnerability, which was classified as critical, was found in Totolink N200RE 9.3.5u.6139_B20201216. This affects the ... |
| CVE-2024-1003 | HIGH | 8.8 | 1.3% | Jan 29, 2024 | A vulnerability, which was classified as critical, has been found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by ... |
| CVE-2024-23747 | HIGH | 7.5 | 0.7% | Jan 29, 2024 | The Moderna Sistemas ModernaNet Hospital Management System 2024 is susceptible to an Insecure Direct Object Reference (I... |
| CVE-2024-1014 | HIGH | 7.5 | 0.6% | Jan 29, 2024 | Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. A... |
| CVE-2024-1002 | HIGH | 8.8 | 1.3% | Jan 29, 2024 | A vulnerability classified as critical was found in Totolink N200RE 9.3.5u.6139_B20201216. Affected by this vulnerabilit... |
| CVE-2024-1000 | HIGH | 8.8 | 1.3% | Jan 29, 2024 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been rated as critical. This issue affects th... |
| CVE-2024-0999 | HIGH | 8.8 | 1.5% | Jan 29, 2024 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been declared as critical. This vulnerability... |
| CVE-2024-0998 | HIGH | 8.8 | 1.4% | Jan 29, 2024 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216. It has been classified as critical. This affects the... |
| CVE-2024-0997 | HIGH | 8.8 | 1.3% | Jan 29, 2024 | A vulnerability was found in Totolink N200RE 9.3.5u.6139_B20201216 and classified as critical. Affected by this issue is... |
| CVE-2024-23791 | HIGH | 7.5 | 0.5% | Jan 29, 2024 | Insertion of debug information into log file during building the elastic search index allows reading of sensitive inform... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now