2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-49753 | CRITICAL | 9.1 | 0.6% | Oct 25, 2024 | Zitadel is open-source identity infrastructure software. Versions prior to 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.... |
| CVE-2024-49381 | HIGH | 7.5 | 0.8% | Oct 25, 2024 | Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The `/postLoca... |
| CVE-2024-49380 | HIGH | 7.5 | 2.8% | Oct 25, 2024 | Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The `/postLocal` ... |
| CVE-2024-9991 | HIGH | 7 | 0.1% | Oct 25, 2024 | This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the devic... |
| CVE-2024-49378 | MEDIUM | 6.1 | 0.3% | Oct 25, 2024 | smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox vers... |
| CVE-2024-49376 | HIGH | 8.8 | 0.5% | Oct 25, 2024 | Autolab, a course management service that enables auto-graded programming assignments, has misconfigured reset password ... |
| CVE-2024-10381 | CRITICAL | 9.8 | 0.8% | Oct 25, 2024 | This vulnerability exists in Matrix Door Controller Cosec Vega FAXQ due to improper implementation of session management... |
| CVE-2024-10380 | HIGH | 7.5 | 0.4% | Oct 25, 2024 | A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0.... |
| CVE-2024-10379 | HIGH | 7.5 | 0.7% | Oct 25, 2024 | A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function ac... |
| CVE-2024-10378 | CRITICAL | 9.8 | 0.5% | Oct 25, 2024 | A vulnerability classified as critical has been found in ESAFENET CDG 5. Affected is the function actionViewCDGRenewFile... |
| CVE-2024-10374 | MEDIUM | 5.4 | 0.4% | Oct 25, 2024 | The WP-Members Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpme... |
| CVE-2024-47483 | MEDIUM | 5.5 | 0.2% | Oct 25, 2024 | Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in a... |
| CVE-2024-47481 | MEDIUM | 6.5 | 0.2% | Oct 25, 2024 | Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated... |
| CVE-2024-47041 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In valid_address of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead ... |
| CVE-2024-47035 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In vring_init of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to a logic e... |
| CVE-2024-47034 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure wi... |
| CVE-2024-47033 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In lwis_allocator_free of lwis_allocator.c, there is a possible memory corruption due to a use after free. This could le... |
| CVE-2024-47031 | HIGH | 7.4 | 0.1% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-329163861. |
| CVE-2024-47030 | MEDIUM | 5.1 | 0.1% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-315191818. |
| CVE-2024-47029 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | In TrustySharedMemoryManager::GetSharedMemory of ondevice/trusty/trusty_shared_memory_manager.cc, there is a possible ou... |
| CVE-2024-47028 | MEDIUM | 4.4 | 0.1% | Oct 25, 2024 | In ffu_flash_pack of ffu.c, there is a possible out of bounds read due to an integer overflow. This could lead to local ... |
| CVE-2024-47027 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In sm_mem_compat_get_vmm_obj of lib/sm/shared_mem.c, there is a possible arbitrary physical memory access due to imprope... |
| CVE-2024-47026 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | In gsc_gsa_rescue of gsc_gsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead... |
| CVE-2024-47025 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | In ppmp_protect_buf of drm_fw.c, there is a possible information disclosure due to a logic error in the code. This could... |
| CVE-2024-47024 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In vring_size of external/headers/include/virtio/virtio_ring.h, there is a possible out of bounds write due to an intege... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now