2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-56975 | CRITICAL | 9.8 | 0.6% | Mar 28, 2025 | InvoicePlane (all versions tested as of December 2024) v.1.6.11 and before contains a remote code execution vulnerabilit... |
| CVE-2024-38988 | CRITICAL | 9.8 | 0.7% | Mar 28, 2025 | alizeait unflatto <= 1.0.2 was discovered to contain a prototype pollution via the method exports.unflatto at /dist/inde... |
| CVE-2024-38985 | CRITICAL | 9.8 | 0.7% | Mar 28, 2025 | janryWang products depath v1.0.6 and cool-path v1.1.2 were discovered to contain a prototype pollution via the set() met... |
| CVE-2024-24292 | CRITICAL | 9.8 | 0.7% | Mar 28, 2025 | A Prototype Pollution issue in Aliconnect /sdk v.0.0.6 allows an attacker to execute arbitrary code via the aim function... |
| CVE-2024-54362 | HIGH | 8.1 | 0.4% | Mar 28, 2025 | Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This is... |
| CVE-2024-54291 | HIGH | 8.6 | 0.5% | Mar 28, 2025 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in labs64 PluginPass plugin... |
| CVE-2024-51624 | HIGH | 7.1 | 0.2% | Mar 28, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jajapagamentos Já-... |
| CVE-2024-48615 | HIGH | 7.5 | 0.4% | Mar 28, 2025 | Null Pointer Dereference vulnerability in libarchive 3.7.6 and earlier when running program bsdtar in function header_pa... |
| CVE-2024-39311 | MEDIUM | 5.4 | 0.2% | Mar 28, 2025 | Publify is a self hosted Web publishing platform on Rails. Prior to version 10.0.1 of Publify, corresponding to versions... |
| CVE-2024-7407 | HIGH | 8.2 | 0.4% | Mar 28, 2025 | Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords ... |
| CVE-2024-11504 | HIGH | 8.6 | 0.4% | Mar 28, 2025 | Input from multiple fields in Streamsoft Prestiż is not sanitized properly, leading to an SQL injection vulnerability, w... |
| CVE-2024-12619 | MEDIUM | 6.5 | 0.3% | Mar 28, 2025 | An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.... |
| CVE-2024-10307 | MEDIUM | 5.5 | 0.2% | Mar 28, 2025 | An issue has been discovered in GitLab EE/CE affecting all versions from 12.10 before 17.8.6, 17.9 before 17.9.3, and 17... |
| CVE-2024-49601 | CRITICAL | 9.8 | 1.5% | Mar 28, 2025 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('... |
| CVE-2024-13939 | HIGH | 7.5 | 0.3% | Mar 28, 2025 | String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the... |
| CVE-2024-49565 | HIGH | 7.8 | 0.5% | Mar 28, 2025 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('... |
| CVE-2024-49564 | HIGH | 7.8 | 0.5% | Mar 28, 2025 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('... |
| CVE-2024-49563 | HIGH | 7.8 | 0.5% | Mar 28, 2025 | Dell Unity, version(s) 5.4 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('... |
| CVE-2024-55070 | LOW | 3.1 | 0.2% | Mar 27, 2025 | A Broken Object Level Authorization vulnerability in the component /households/permissions of hay-kot mealie v2.2.0 allo... |
| CVE-2024-55073 | HIGH | 7.6 | 0.3% | Mar 27, 2025 | A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows ... |
| CVE-2024-55072 | MEDIUM | 5.4 | 0.3% | Mar 27, 2025 | A Broken Object Level Authorization vulnerability in the component /api/users/{user-id} of hay-kot mealie v2.2.0 allows ... |
| CVE-2024-12905 | HIGH | 7.5 | 2.2% | Mar 27, 2025 | An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted ... |
| CVE-2024-58091 | MEDIUM | 5.5 | 0.2% | Mar 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/... |
| CVE-2024-58090 | MEDIUM | 5.5 | 0.2% | Mar 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts ar... |
| CVE-2024-56469 | MEDIUM | 6.3 | 0.2% | Mar 27, 2025 | IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now