2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-48936 | MEDIUM | 5 | 0.3% | Oct 28, 2024 | SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit a... |
| CVE-2024-10440 | CRITICAL | 9.8 | 0.5% | Oct 28, 2024 | The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitra... |
| CVE-2024-10439 | HIGH | 7.5 | 0.4% | Oct 28, 2024 | The eHRD CTMS from Sunnet has an Insecure Direct Object Reference (IDOR) vulnerability, allowing unauthenticated remote ... |
| CVE-2024-10438 | HIGH | 7.5 | 0.5% | Oct 28, 2024 | The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypas... |
| CVE-2024-23843 | LOW | 2.2 | 0.2% | Oct 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Genians Genian NAC... |
| CVE-2024-50067 | HIGH | 7.8 | 0.2% | Oct 28, 2024 | In the Linux kernel, the following vulnerability has been resolved: uprobe: avoid out-of-bounds memory access of fetchi... |
| CVE-2024-10435 | MEDIUM | 6.3 | 1.2% | Oct 28, 2024 | A vulnerability was found in didi Super-Jacoco 1.0. It has been declared as critical. This vulnerability affects unknown... |
| CVE-2024-10434 | CRITICAL | 9.8 | 1.2% | Oct 28, 2024 | A vulnerability was found in Tenda AC1206 up to 20241027. It has been classified as critical. This affects the function ... |
| CVE-2024-50624 | MEDIUM | 5.9 | 0.3% | Oct 28, 2024 | ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled m... |
| CVE-2024-50623 | CRITICAL | 9.8 | 98.6% | Oct 28, 2024 | In Cleo Harmony before 5.8.0.21, VLTrader before 5.8.0.21, and LexiCom before 5.8.0.21, there is an unrestricted file up... |
| CVE-2024-10433 | MEDIUM | 6.1 | 0.4% | Oct 28, 2024 | A vulnerability was found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as problematic. Affecte... |
| CVE-2024-10432 | CRITICAL | 9.8 | 0.6% | Oct 28, 2024 | A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affec... |
| CVE-2024-10431 | CRITICAL | 9.8 | 0.7% | Oct 27, 2024 | A vulnerability, which was classified as critical, was found in Codezips Pet Shop Management System 1.0. Affected is an ... |
| CVE-2024-10430 | CRITICAL | 9.8 | 0.7% | Oct 27, 2024 | A vulnerability, which was classified as critical, has been found in Codezips Pet Shop Management System 1.0. This issue... |
| CVE-2024-50616 | HIGH | 8.8 | 0.4% | Oct 27, 2024 | Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job... |
| CVE-2024-50615 | MEDIUM | 6.5 | 0.4% | Oct 27, 2024 | TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/digit, that may lead to application exit, in tinyxml2.cpp... |
| CVE-2024-50614 | MEDIUM | 6.5 | 0.4% | Oct 27, 2024 | TinyXML2 through 10.0.0 has a reachable assertion for UINT_MAX/16, that may lead to application exit, in tinyxml2.cpp XM... |
| CVE-2024-50613 | MEDIUM | 6.5 | 0.5% | Oct 27, 2024 | libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encod... |
| CVE-2024-50612 | MEDIUM | 5.5 | 0.3% | Oct 27, 2024 | libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. |
| CVE-2024-50611 | HIGH | 7.2 | 0.8% | Oct 27, 2024 | CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-relate... |
| CVE-2024-50610 | LOW | 3.6 | 0.3% | Oct 27, 2024 | GSL (GNU Scientific Library) through 2.8 has an integer signedness error in gsl_siman_solve_many in siman/siman.c. When ... |
| CVE-2024-10429 | HIGH | 7.2 | 17.2% | Oct 27, 2024 | A vulnerability classified as critical has been found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. Affected... |
| CVE-2024-10428 | HIGH | 7.2 | 14.1% | Oct 27, 2024 | A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028. It has been rated as critical. This ... |
| CVE-2024-10427 | CRITICAL | 9.8 | 0.5% | Oct 27, 2024 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerabili... |
| CVE-2024-10426 | CRITICAL | 9.8 | 0.5% | Oct 27, 2024 | A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been classified as critical. This affects a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now