2024 CVE Vulnerabilities

39,218 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-49700HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems ...
CVE-2024-49699HIGH8.8Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue ...
CVE-2024-49666HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems ...
CVE-2024-49333HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega...
CVE-2024-49303HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Hero Mega...
CVE-2024-49300HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Hero Mega...
CVE-2024-57945HIGH7.1In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound issue of vmemmap ad...
CVE-2024-57943HIGH7.8In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before wri...
CVE-2024-43709HIGH7.5An allocation of resources without limits or throttling in Elasticsearch can lead to an OutOfMemoryError exception resul...
CVE-2024-12104HIGH7.5The Visual Website Collaboration, Feedback & Project Management – Atarim plugin for WordPress is vulnerable to unauthori...
CVE-2024-10936HIGH8.8The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6....
CVE-2024-22348HIGH7.5IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses Cross-Origin Resource Sharing (CORS) whi...
CVE-2024-22347HIGH7.5IBM DevOps Velocity 5.0.0 and IBM UrbanCode Velocity 4.0.0 through 4.0. 25 uses weaker than expected cryptographic algor...
CVE-2024-51738HIGH8.1Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementat...
CVE-2024-41743HIGH7.5IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connect...
CVE-2024-41742HIGH7.5IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout...
CVE-2024-57929HIGH7.1In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice ...
CVE-2024-57928HIGH7.1In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If ne...
CVE-2024-57926HIGH7.8In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm ...
CVE-2024-57925HIGH7.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the...
CVE-2024-57917HIGH7.8In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing ...
CVE-2024-57912HIGH7.1In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in tri...
CVE-2024-57911HIGH7.1In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix informatio...
CVE-2024-57910HIGH7.1In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in trigg...
CVE-2024-57909HIGH7.1In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in trigger...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now