2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-23203 | HIGH | 7.5 | 0.9% | Jan 23, 2024 | The issue was addressed with additional permissions checks. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.... |
| CVE-2024-23342 | HIGH | 7.4 | 1.0% | Jan 23, 2024 | The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (El... |
| CVE-2024-23678 | HIGH | 8.8 | 0.2% | Jan 22, 2024 | In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path inpu... |
| CVE-2024-0605 | HIGH | 7.5 | 0.4% | Jan 22, 2024 | Using a javascript: URI with a setTimeout race condition, an attacker can execute unauthorized scripts on top origin sit... |
| CVE-2024-22895 | HIGH | 8.8 | 0.8% | Jan 22, 2024 | DedeCMS 5.7.112 has a File Upload vulnerability via uploads/dede/module_upload.php. |
| CVE-2024-22233 | HIGH | 7.5 | 1.0% | Jan 22, 2024 | In Spring Framework versions 6.0.15 and 6.1.2, it is possible for a user to provide specially crafted HTTP requests that... |
| CVE-2024-0775 | HIGH | 7.1 | 0.2% | Jan 22, 2024 | A use-after-free flaw was found in the __ext4_remount in fs/ext4/super.c in ext4 in the Linux kernel. This flaw allows a... |
| CVE-2024-23768 | HIGH | 8.8 | 0.6% | Jan 22, 2024 | Dremio before 24.3.1 allows path traversal. An authenticated user who has no privileges on certain folders (and the file... |
| CVE-2024-23750 | HIGH | 8.8 | 1.0% | Jan 22, 2024 | MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell met... |
| CVE-2024-23744 | HIGH | 7.5 | 0.7% | Jan 21, 2024 | An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello ... |
| CVE-2024-0770 | HIGH | 7.1 | 0.3% | Jan 21, 2024 | A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affe... |
| CVE-2024-23732 | HIGH | 7.5 | 0.8% | Jan 21, 2024 | The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to j... |
| CVE-2024-23726 | HIGH | 8.8 | 0.5% | Jan 21, 2024 | Ubee DDW365 XCNDDW365 devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. A remote... |
| CVE-2024-0521 | HIGH | 7.8 | 0.5% | Jan 20, 2024 | Code Injection in paddlepaddle/paddle |
| CVE-2024-0737 | HIGH | 7.5 | 4.2% | Jan 19, 2024 | A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unkn... |
| CVE-2024-23689 | HIGH | 8.8 | 0.7% | Jan 19, 2024 | Exposure of sensitive information in exceptions in ClichHouse's clickhouse-r2dbc, com.clickhouse:clickhouse-jdbc, and co... |
| CVE-2024-23684 | HIGH | 7.5 | 0.9% | Jan 19, 2024 | Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Bi... |
| CVE-2024-23683 | HIGH | 8.2 | 0.4% | Jan 19, 2024 | Artemis Java Test Sandbox versions less than 1.7.6 are vulnerable to a sandbox escape when an attacker crafts a special ... |
| CVE-2024-23682 | HIGH | 8.2 | 0.4% | Jan 19, 2024 | Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files... |
| CVE-2024-23681 | HIGH | 8.2 | 0.3% | Jan 19, 2024 | Artemis Java Test Sandbox versions before 1.11.2 are vulnerable to a sandbox escape when an attacker loads untrusted lib... |
| CVE-2024-0736 | HIGH | 7.5 | 1.0% | Jan 19, 2024 | A vulnerability classified as problematic has been found in EFS Easy File Sharing FTP 3.6. This affects an unknown part ... |
| CVE-2024-23331 | HIGH | 7.5 | 0.8% | Jan 19, 2024 | Vite is a frontend tooling framework for javascript. The Vite dev server option `server.fs.deny` can be bypassed on case... |
| CVE-2024-0732 | HIGH | 7.5 | 1.1% | Jan 19, 2024 | A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown proce... |
| CVE-2024-0731 | HIGH | 7.5 | 1.1% | Jan 19, 2024 | A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as problematic. This vulnerability affects unkno... |
| CVE-2024-22956 | HIGH | 7.8 | 0.3% | Jan 19, 2024 | swftools 0.9.2 was discovered to contain a heap-use-after-free vulnerability via the function removeFromTo at swftools/s... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now