2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-10230 | HIGH | 8.8 | 0.6% | Oct 22, 2024 | Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2024-10229 | HIGH | 8.1 | 0.5% | Oct 22, 2024 | Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass s... |
| CVE-2024-48919 | CRITICAL | 9.2 | 0.5% | Oct 22, 2024 | Cursor is a code editor built for programming with AI. Prior to Sep 27, 2024, if a user generated a terminal command via... |
| CVE-2024-45526 | MEDIUM | 5.3 | 0.5% | Oct 22, 2024 | An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send r... |
| CVE-2024-48904 | CRITICAL | 9.8 | 2.5% | Oct 22, 2024 | An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on ... |
| CVE-2024-48903 | HIGH | 7.8 | 0.7% | Oct 22, 2024 | An improper access control vulnerability in Trend Micro Deep Security Agent 20 could allow a local attacker to escalate ... |
| CVE-2024-46903 | MEDIUM | 6.5 | 1.2% | Oct 22, 2024 | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose... |
| CVE-2024-46902 | CRITICAL | 9.1 | 1.9% | Oct 22, 2024 | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacker to disclose... |
| CVE-2024-45335 | MEDIUM | 5.5 | 0.2% | Oct 22, 2024 | Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a speci... |
| CVE-2024-45334 | HIGH | 7.8 | 0.1% | Oct 22, 2024 | Trend Micro Antivirus One versions 3.10.4 and below (Consumer) is vulnerable to an Arbitrary Configuration Update that c... |
| CVE-2024-41183 | HIGH | 7.8 | 1.0% | Oct 22, 2024 | Trend Micro VPN, version 5.8.1012 and below is vulnerable to an arbitrary file overwrite under specific conditions that ... |
| CVE-2024-39753 | HIGH | 7.5 | 2.0% | Oct 22, 2024 | An modOSCE SQL Injection vulnerability in Trend Micro Apex One could allow a remote attacker to execute arbitrary code o... |
| CVE-2024-10183 | MEDIUM | 5.2 | 0.1% | Oct 22, 2024 | A vulnerability in Jamf Pro's Jamf Remote Assist tool allows a local, non-privileged user to escalate their privileges t... |
| CVE-2024-9287 | HIGH | 7.8 | 0.6% | Oct 22, 2024 | A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual en... |
| CVE-2024-9129 | CRITICAL | 9.3 | 0.4% | Oct 22, 2024 | In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered. Reported by Dylan Ma... |
| CVE-2024-49211 | MEDIUM | 6.1 | 0.3% | Oct 22, 2024 | Reflected XSS was discovered in a Dashboard Listing Archer Platform UX page in Archer Platform 6.x before version 2024.0... |
| CVE-2024-49210 | MEDIUM | 6.1 | 0.3% | Oct 22, 2024 | Reflected XSS was discovered in an iView List Archer Platform UX page in Archer Platform 6.x before version 2024.09. A r... |
| CVE-2024-49209 | MEDIUM | 4.3 | 0.3% | Oct 22, 2024 | Archer Platform 2024.03 before version 2024.09 is affected by an API authorization bypass vulnerability related to suppo... |
| CVE-2024-49208 | LOW | 3.1 | 0.3% | Oct 22, 2024 | Archer Platform 2024.03 before version 2024.08 is affected by an authorization bypass vulnerability related to supportin... |
| CVE-2024-48708 | MEDIUM | 5.4 | 0.3% | Oct 22, 2024 | Collabtive 3.1 is vulnerable to Cross-Site Scripting (XSS) via the name parameter in (a) file tasklist.php under action ... |
| CVE-2024-48707 | MEDIUM | 5.4 | 0.3% | Oct 22, 2024 | Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit wi... |
| CVE-2024-48706 | MEDIUM | 5.4 | 0.3% | Oct 22, 2024 | Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the title parameter with action=add or action=editform wi... |
| CVE-2024-48570 | HIGH | 7.5 | 0.5% | Oct 22, 2024 | Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports param... |
| CVE-2024-46538 | MEDIUM | 4.8 | 77.9% | Oct 22, 2024 | A cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML v... |
| CVE-2024-45518 | HIGH | 8.8 | 20.3% | Oct 22, 2024 | An issue was discovered in Zimbra Collaboration (ZCS) 10.1.x before 10.1.1, 10.0.x before 10.0.9, 9.0.0 before Patch 41,... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now