2024 CVE Vulnerabilities
39,358 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-24858 | MEDIUM | 5.3 | 0.3% | Feb 5, 2024 | A race condition was found in the Linux kernel's net/bluetooth in {conn,adv}_{min,max}_interval_set() function. This can... |
| CVE-2024-24857 | MEDIUM | 6.8 | 0.3% | Feb 5, 2024 | A race condition was found in the Linux kernel's net/bluetooth device driver in conn_info_{min,max}_age_set() function. ... |
| CVE-2024-24855 | MEDIUM | 4.7 | 0.2% | Feb 5, 2024 | A race condition was found in the Linux kernel's scsi device driver in lpfc_unregister_fcf_rescan() function. This can r... |
| CVE-2024-23196 | MEDIUM | 4.7 | 0.2% | Feb 5, 2024 | A race condition was found in the Linux kernel's sound/hda device driver in snd_hdac_regmap_sync() function. This can r... |
| CVE-2024-22386 | MEDIUM | 4.7 | 0.2% | Feb 5, 2024 | A race condition was found in the Linux kernel's drm/exynos device driver in exynos_drm_crtc_atomic_disable() function. ... |
| CVE-2024-24865 | MEDIUM | 5.4 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan Scroll ... |
| CVE-2024-24848 | MEDIUM | 6.1 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MJS Software PT Si... |
| CVE-2024-24847 | MEDIUM | 6.1 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jgadbois Calculato... |
| CVE-2024-24846 | MEDIUM | 6.1 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MightyThemes Might... |
| CVE-2024-24841 | MEDIUM | 4.8 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan's Art Add Cust... |
| CVE-2024-24839 | MEDIUM | 5.4 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gordon Böhme, Anto... |
| CVE-2024-24838 | MEDIUM | 5.4 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Five Star Plugins ... |
| CVE-2024-24870 | MEDIUM | 5.4 | 0.3% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Dempfle Ad... |
| CVE-2024-24866 | MEDIUM | 6.1 | 0.4% | Feb 5, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Biteship Biteship:... |
| CVE-2024-20016 | MEDIUM | 4.4 | 0.1% | Feb 5, 2024 | In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local denial of service w... |
| CVE-2024-20013 | MEDIUM | 6.7 | 0.1% | Feb 5, 2024 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio... |
| CVE-2024-20012 | MEDIUM | 6.7 | 0.1% | Feb 5, 2024 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of... |
| CVE-2024-20010 | MEDIUM | 6.7 | 0.1% | Feb 5, 2024 | In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of... |
| CVE-2024-20006 | MEDIUM | 6.7 | 0.2% | Feb 5, 2024 | In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri... |
| CVE-2024-20002 | MEDIUM | 6.7 | 0.1% | Feb 5, 2024 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of ... |
| CVE-2024-20001 | MEDIUM | 6.7 | 0.1% | Feb 5, 2024 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of ... |
| CVE-2024-1215 | MEDIUM | 6.1 | 0.6% | Feb 3, 2024 | A vulnerability was found in SourceCodester CRUD without Page Reload 1.0. It has been rated as problematic. Affected by ... |
| CVE-2024-0853 | MEDIUM | 5.3 | 1.1% | Feb 3, 2024 | curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) te... |
| CVE-2024-23550 | MEDIUM | 5.5 | 0.2% | Feb 3, 2024 | HCL DevOps Deploy / HCL Launch (UCD) could disclose sensitive user information when installing the Windows agent. |
| CVE-2024-0895 | MEDIUM | 5.4 | 0.4% | Feb 3, 2024 | The PDF Flipbook, 3D Flipbook – DearFlip plugin for WordPress is vulnerable to Stored Cross-Site Scripting via outline s... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now