2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-0306 | HIGH | 7.5 | 0.7% | Jan 8, 2024 | A vulnerability was found in Kashipara Dynamic Lab Management System up to 1.0. It has been classified as critical. This... |
| CVE-2024-0305 | HIGH | 7.5 | 66.9% | Jan 8, 2024 | A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast up to 2017 and classified as problematic. Affe... |
| CVE-2024-0291 | HIGH | 8.8 | 4.4% | Jan 8, 2024 | A vulnerability was found in Totolink LR1200GB 9.1.0u.6619_B20230130. It has been rated as critical. This issue affects ... |
| CVE-2024-0265 | HIGH | 8.8 | 20.9% | Jan 7, 2024 | A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects... |
| CVE-2024-0263 | HIGH | 7.5 | 1.4% | Jan 7, 2024 | A vulnerability was found in ACME Ultra Mini HTTPd 1.21. It has been classified as problematic. This affects an unknown ... |
| CVE-2024-0261 | HIGH | 7.5 | 1.3% | Jan 7, 2024 | A vulnerability has been found in Sentex FTPDMIN 0.96 and classified as problematic. Affected by this vulnerability is a... |
| CVE-2024-0260 | HIGH | 7.5 | 0.5% | Jan 7, 2024 | A vulnerability, which was classified as problematic, was found in SourceCodester Engineers Online Portal 1.0. Affected ... |
| CVE-2024-21642 | HIGH | 7.5 | 0.7% | Jan 5, 2024 | D-Tale is a visualizer for Pandas data structures. Users hosting versions D-Tale prior to 3.9.0 publicly can be vulnerab... |
| CVE-2024-22050 | HIGH | 7.5 | 0.9% | Jan 4, 2024 | Path traversal in the static file service in Iodine less than 0.7.33 allows an unauthenticated, remote attacker to read ... |
| CVE-2024-0241 | HIGH | 7.5 | 1.1% | Jan 4, 2024 | encoded_id-rails versions before 1.0.0.beta2 are affected by an uncontrolled resource consumption vulnerability. A remot... |
| CVE-2024-21625 | HIGH | 8.8 | 0.8% | Jan 4, 2024 | SideQuest is a place to get virtual reality applications for Oculus Quest. The SideQuest desktop application uses deep l... |
| CVE-2024-0225 | HIGH | 8.8 | 1.0% | Jan 4, 2024 | Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap ... |
| CVE-2024-0224 | HIGH | 8.8 | 1.0% | Jan 4, 2024 | Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit hea... |
| CVE-2024-0223 | HIGH | 8.8 | 10.1% | Jan 4, 2024 | Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit ... |
| CVE-2024-0222 | HIGH | 8.8 | 1.1% | Jan 4, 2024 | Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the rende... |
| CVE-2024-21634 | HIGH | 7.5 | 0.8% | Jan 3, 2024 | Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service iss... |
| CVE-2024-21633 | HIGH | 7.8 | 1.3% | Jan 3, 2024 | Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files'... |
| CVE-2024-21622 | HIGH | 8.8 | 0.6% | Jan 3, 2024 | Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerabi... |
| CVE-2024-21909 | HIGH | 7.5 | 1.1% | Jan 3, 2024 | PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of service vulnerability. An attacker may trigger t... |
| CVE-2024-21907 | HIGH | 7.5 | 32.9% | Jan 3, 2024 | Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data... |
| CVE-2024-0211 | HIGH | 7.5 | 0.5% | Jan 3, 2024 | DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file |
| CVE-2024-0210 | HIGH | 7.5 | 0.5% | Jan 3, 2024 | Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file |
| CVE-2024-0209 | HIGH | 7.5 | 0.6% | Jan 3, 2024 | IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet... |
| CVE-2024-0208 | HIGH | 7.5 | 1.8% | Jan 3, 2024 | GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet inject... |
| CVE-2024-0207 | HIGH | 7.5 | 0.5% | Jan 3, 2024 | HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now