2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-24399 | HIGH | 7.2 | 15.6% | Jan 25, 2024 | An arbitrary file upload vulnerability in LEPTON v7.0.0 allows authenticated attackers to execute arbitrary PHP code by ... |
| CVE-2024-22636 | HIGH | 8.8 | 1.3% | Jan 25, 2024 | PluXml Blog v5.8.9 was discovered to contain a remote code execution (RCE) vulnerability in the Static Pages feature. Th... |
| CVE-2024-0885 | HIGH | 7.5 | 1.4% | Jan 25, 2024 | A vulnerability classified as problematic has been found in SpyCamLizard 1.230. Affected is an unknown function of the c... |
| CVE-2024-23656 | HIGH | 7.5 | 0.4% | Jan 25, 2024 | Dex is an identity service that uses OpenID Connect to drive authentication for other apps. Dex 2.37.0 serves HTTPS with... |
| CVE-2024-0882 | HIGH | 7.5 | 0.8% | Jan 25, 2024 | A vulnerability was found in qwdigital LinkWechat 5.1.0. It has been classified as problematic. This affects an unknown ... |
| CVE-2024-0880 | HIGH | 8.8 | 0.4% | Jan 25, 2024 | A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unkno... |
| CVE-2024-22749 | HIGH | 7.8 | 0.5% | Jan 25, 2024 | GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in ... |
| CVE-2024-0822 | HIGH | 7.5 | 0.7% | Jan 25, 2024 | An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in the system w... |
| CVE-2024-23307 | HIGH | 7.8 | 0.6% | Jan 25, 2024 | Integer Overflow or Wraparound vulnerability in Linux Linux kernel kernel on Linux, x86, ARM (md, raid, raid5 modules) a... |
| CVE-2024-23985 | HIGH | 7.5 | 3.6% | Jan 25, 2024 | EzServer 6.4.017 allows a denial of service (daemon crash) via a long string, such as one for the RNTO command. |
| CVE-2024-23646 | HIGH | 8.8 | 0.8% | Jan 24, 2024 | Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The application allows users to create zip... |
| CVE-2024-23644 | HIGH | 8.1 | 0.6% | Jan 24, 2024 | Trillium is a composable toolkit for building internet applications with async rust. In `trillium-http` prior to 0.3.12 ... |
| CVE-2024-23904 | HIGH | 7.5 | 0.9% | Jan 24, 2024 | Jenkins Log Command Plugin 1.0.2 and earlier does not disable a feature of its command parser that replaces an '@' chara... |
| CVE-2024-23898 | HIGH | 8.8 | 66.9% | Jan 24, 2024 | Jenkins 2.217 through 2.441 (both inclusive), LTS 2.222.1 through 2.426.2 (both inclusive) does not perform origin valid... |
| CVE-2024-23648 | HIGH | 8.8 | 0.8% | Jan 24, 2024 | Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. The password reset functionality sends to ... |
| CVE-2024-23641 | HIGH | 7.5 | 0.8% | Jan 24, 2024 | SvelteKit is a web development kit. In SvelteKit 2, sending a GET request with a body eg `{}` to a built and previewed/h... |
| CVE-2024-22141 | HIGH | 7.5 | 0.5% | Jan 24, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue af... |
| CVE-2024-22154 | HIGH | 7.5 | 0.5% | Jan 24, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SNP Digital SalesKing.This issue affects Sal... |
| CVE-2024-22301 | HIGH | 7.5 | 0.4% | Jan 24, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ignazio Scimone Albo Pretorio On line.This i... |
| CVE-2024-22294 | HIGH | 7.5 | 0.5% | Jan 24, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in IP2Location IP2Location Country Blocker.This... |
| CVE-2024-22152 | HIGH | 7.2 | 0.5% | Jan 24, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Product Import Export for WooCommerce.This is... |
| CVE-2024-22135 | HIGH | 7.2 | 0.5% | Jan 24, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in WebToffee Order Export & Order Import for WooCommerce.T... |
| CVE-2024-0813 | HIGH | 8.8 | 0.4% | Jan 24, 2024 | Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to insta... |
| CVE-2024-0812 | HIGH | 8.8 | 0.5% | Jan 24, 2024 | Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to poten... |
| CVE-2024-0807 | HIGH | 8.8 | 0.5% | Jan 24, 2024 | Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit hea... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now