2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-47023 | HIGH | 8.1 | 0.2% | Oct 25, 2024 | there is a possible man-in-the-middle attack due to a logic error in the code. This could lead to remote escalation of p... |
| CVE-2024-47022 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ACPM component, A-331255656. |
| CVE-2024-47021 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | In sms_ExtractCbLanguage of sms_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. T... |
| CVE-2024-47020 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488. |
| CVE-2024-47019 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a miss... |
| CVE-2024-47018 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This... |
| CVE-2024-47017 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead t... |
| CVE-2024-47016 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privil... |
| CVE-2024-47015 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due t... |
| CVE-2024-47014 | HIGH | 8.8 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292. |
| CVE-2024-47013 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This c... |
| CVE-2024-47012 | HIGH | 7.8 | 0.1% | Oct 25, 2024 | In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bound... |
| CVE-2024-44101 | HIGH | 7.5 | 0.4% | Oct 25, 2024 | there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote d... |
| CVE-2024-44100 | HIGH | 7.5 | 0.2% | Oct 25, 2024 | Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545. |
| CVE-2024-44099 | MEDIUM | 5.5 | 0.1% | Oct 25, 2024 | There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local informat... |
| CVE-2024-44098 | HIGH | 7.4 | 0.1% | Oct 25, 2024 | In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free.... |
| CVE-2024-10377 | CRITICAL | 9.8 | 0.7% | Oct 25, 2024 | A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. This issue affects the function actionPassDe... |
| CVE-2024-10376 | CRITICAL | 9.8 | 0.7% | Oct 25, 2024 | A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. This vulnerability affects the function a... |
| CVE-2024-8666 | MEDIUM | 6.4 | 0.3% | Oct 25, 2024 | The Shoutcast Icecast HTML5 Radio Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi... |
| CVE-2024-10343 | MEDIUM | 6.4 | 0.3% | Oct 25, 2024 | The Beek Widget Extention plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions u... |
| CVE-2024-10112 | MEDIUM | 6.4 | 0.3% | Oct 25, 2024 | The Simple News plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'news' shortcode in a... |
| CVE-2024-10016 | MEDIUM | 6.4 | 0.4% | Oct 25, 2024 | The File Upload Types by WPForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads ... |
| CVE-2024-9630 | MEDIUM | 5.3 | 0.3% | Oct 25, 2024 | The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when ... |
| CVE-2024-9628 | MEDIUM | 6.5 | 0.3% | Oct 25, 2024 | The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a ... |
| CVE-2024-9598 | HIGH | 8.8 | 0.3% | Oct 25, 2024 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now