2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10864 | HIGH | 7.5 | 0.3% | May 14, 2025 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in OpenText Advanced ... |
| CVE-2024-57273 | MEDIUM | 5.4 | 1.2% | May 14, 2025 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XS... |
| CVE-2024-54780 | HIGH | 8.8 | 12.0% | May 14, 2025 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in th... |
| CVE-2024-54779 | MEDIUM | 5.4 | 3.7% | May 14, 2025 | Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XS... |
| CVE-2024-24780 | CRITICAL | 9.8 | 1.3% | May 14, 2025 | Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create ... |
| CVE-2024-8988 | MEDIUM | 5.3 | 0.2% | May 14, 2025 | The PeepSo Core: File Uploads plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up ... |
| CVE-2024-13940 | MEDIUM | 5.5 | 0.2% | May 14, 2025 | The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and in... |
| CVE-2024-52290 | MEDIUM | 5.4 | 0.2% | May 14, 2025 | LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version ... |
| CVE-2024-48869 | MEDIUM | 6.1 | 0.1% | May 13, 2025 | Improper restriction of software interfaces to hardware features for some Intel(R) Xeon(R) 6 processor with E-cores when... |
| CVE-2024-47800 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enabl... |
| CVE-2024-47795 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authe... |
| CVE-2024-47550 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to pote... |
| CVE-2024-46895 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101... |
| CVE-2024-45371 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6077 may allow... |
| CVE-2024-45333 | HIGH | 7.3 | 0.1% | May 13, 2025 | Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 ma... |
| CVE-2024-45332 | MEDIUM | 5.7 | 0.2% | May 13, 2025 | Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio... |
| CVE-2024-43420 | MEDIUM | 5.7 | 0.1% | May 13, 2025 | Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient executio... |
| CVE-2024-43101 | MEDIUM | 5.8 | 0.1% | May 13, 2025 | Improper access control for some Intel(R) Data Center GPU Flex Series for Windows driver software before version 31.0.10... |
| CVE-2024-39833 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentia... |
| CVE-2024-39758 | MEDIUM | 5.9 | 0.1% | May 13, 2025 | Improper access control for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 31.0.101.4032 may allow... |
| CVE-2024-36292 | HIGH | 8.2 | 0.1% | May 13, 2025 | Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.43... |
| CVE-2024-31150 | MEDIUM | 4.8 | 0.1% | May 13, 2025 | Out-of-bounds read for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable info... |
| CVE-2024-31073 | MEDIUM | 6.7 | 0.1% | May 13, 2025 | Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially ena... |
| CVE-2024-29222 | MEDIUM | 6.1 | 0.1% | May 13, 2025 | Out-of-bounds write for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable den... |
| CVE-2024-28956 | MEDIUM | 5.7 | 0.4% | May 13, 2025 | Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) P... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now