2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22568 | HIGH | 8.8 | 0.3% | Jan 18, 2024 | FlyCms v1.0 contains a Cross-Site Request Forgery (CSRF) vulnerability via /system/score/del. |
| CVE-2024-0669 | HIGH | 7.1 | 0.3% | Jan 18, 2024 | A Cross-Frame Scripting vulnerability has been found on Plone CMS affecting verssion below 6.0.5. An attacker could stor... |
| CVE-2024-0580 | HIGH | 7.5 | 0.5% | Jan 18, 2024 | Omission of user-controlled key authorization in the IDMSistemas platform, affecting the QSige product. This vulnerabili... |
| CVE-2024-0654 | HIGH | 7.8 | 0.3% | Jan 18, 2024 | A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Aff... |
| CVE-2024-0651 | HIGH | 7.2 | 0.6% | Jan 18, 2024 | A vulnerability was found in PHPGurukul Company Visitor Management System 1.0. It has been declared as critical. Affecte... |
| CVE-2024-22416 | HIGH | 8.8 | 0.9% | Jan 18, 2024 | pyLoad is a free and open-source Download Manager written in pure Python. The `pyload` API allows any API call to be mad... |
| CVE-2024-22410 | HIGH | 7.8 | 0.2% | Jan 17, 2024 | Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loa... |
| CVE-2024-22715 | HIGH | 8.8 | 0.3% | Jan 17, 2024 | Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.ph... |
| CVE-2024-20287 | HIGH | 7.2 | 1.4% | Jan 17, 2024 | A vulnerability in the web-based management interface of the Cisco WAP371 Wireless-AC/N Dual Radio Access Point (AP) wit... |
| CVE-2024-20277 | HIGH | 8 | 0.8% | Jan 17, 2024 | A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installa... |
| CVE-2024-0646 | HIGH | 7.8 | 0.3% | Jan 17, 2024 | An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user ... |
| CVE-2024-0396 | HIGH | 7.1 | 0.5% | Jan 17, 2024 | In Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.... |
| CVE-2024-0645 | HIGH | 7.8 | 0.2% | Jan 17, 2024 | Buffer overflow vulnerability in Explorer++ affecting version 1.3.5.531. A local attacker could execute arbitrary code v... |
| CVE-2024-22409 | HIGH | 8.8 | 0.7% | Jan 16, 2024 | DataHub is an open-source metadata platform. In affected versions a low privileged user could remove a user, edit group ... |
| CVE-2024-22408 | HIGH | 8.1 | 0.4% | Jan 16, 2024 | Shopware is an open headless commerce platform. The implemented Flow Builder functionality in the Shopware application d... |
| CVE-2024-21670 | HIGH | 8.1 | 0.3% | Jan 16, 2024 | Ursa is a cryptographic library for use with blockchains. The revocation schema that is part of the Ursa CL-Signatures i... |
| CVE-2024-20952 | HIGH | 7.4 | 0.9% | Jan 16, 2024 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2024-20932 | HIGH | 7.5 | 0.8% | Jan 16, 2024 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2024-20924 | HIGH | 7.6 | 0.4% | Jan 16, 2024 | Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected a... |
| CVE-2024-20918 | HIGH | 7.4 | 0.9% | Jan 16, 2024 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2024-20916 | HIGH | 8.3 | 0.3% | Jan 16, 2024 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Mana... |
| CVE-2024-0519 | HIGH | 8.8 | 3.8% | Jan 16, 2024 | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially expl... |
| CVE-2024-0518 | HIGH | 8.8 | 0.9% | Jan 16, 2024 | Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corr... |
| CVE-2024-0517 | HIGH | 8.8 | 21.7% | Jan 16, 2024 | Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap... |
| CVE-2024-0507 | HIGH | 8.8 | 65.8% | Jan 16, 2024 | An attacker with access to a Management Console user account with the editor role could escalate privileges through a co... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now