2024 CVE Vulnerabilities

39,272 CVEs published in 2024.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2024-28759MEDIUM4.3A crafted network packet may cause a buffer overrun in Wind River VxWorks 7 through 23.09.
CVE-2024-28277MEDIUM6.1In Sourcecodester School Task Manager v1.0, a vulnerability was identified within the subject_name= parameter, enabling ...
CVE-2024-28276MEDIUM6.1Sourcecodester School Task Manager 1.0 is vulnerable to Cross Site Scripting (XSS) via add-task.php?task_name=.
CVE-2024-27852MEDIUM6.5A privacy issue was addressed with improved client ID handling for alternative app marketplaces. This issue is fixed in ...
CVE-2024-27847MEDIUM5.5This issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS ...
CVE-2024-27841MEDIUM5.5The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14....
CVE-2024-27834MEDIUM5.5The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5...
CVE-2024-27827MEDIUM5.5This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6...
CVE-2024-27821MEDIUM4.7A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Son...
CVE-2024-27816MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tv...
CVE-2024-27810MEDIUM5.5A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Mon...
CVE-2024-27804MEDIUM5.5The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14....
CVE-2024-27789MEDIUM5.5A logic issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, macOS Monterey 12...
CVE-2024-27460MEDIUM6.7A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below.
CVE-2024-27400MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: once more fix the call oder in amdgpu_t...
CVE-2024-27399MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_...
CVE-2024-27282MEDIUM6.6An issue was discovered in Ruby 3.x through 3.3.0. If attacker-supplied data is provided to the Ruby regex compiler, it ...
CVE-2024-27281MEDIUM4.5An issue was discovered in RDoc 6.3.3 through 6.6.2, as distributed in Ruby 3.x through 3.3.0. When parsing .rdoc_option...
CVE-2024-27269MEDIUM6.8IBM QRadar SIEM 7.5 could allow a privileged user to configure user management that would disclose unintended sensitive ...
CVE-2024-27082MEDIUM5.4Cacti provides an operational monitoring and fault management framework. Versions of Cacti prior to 1.2.27 are vulnerabl...
CVE-2024-26306MEDIUM5.9iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channe...
CVE-2024-25662MEDIUM6.1Oxygen XML Web Author v26.0.0 and older and Oxygen Content Fusion v6.1 and older are vulnerable to Cross-Site Scripting ...
CVE-2024-24157MEDIUM6.1Gnuboard g6 / https://github.com/gnuboard/g6 commit c2cc1f5069e00491ea48618d957332d90f6d40e4 is vulnerable to Cross Site...
CVE-2024-23236MEDIUM5.5A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5. An app may be able to ...
CVE-2024-23229MEDIUM5.5This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.5,...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now