2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-40673 | MEDIUM | 6.5 | 0.3% | Jan 28, 2025 | In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Cod... |
| CVE-2024-8401 | MEDIUM | 5.4 | 0.3% | Jan 28, 2025 | CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability exists when a... |
| CVE-2024-7881 | MEDIUM | 5.1 | 0.2% | Jan 28, 2025 | An unprivileged context can trigger a data memory-dependent prefetch engine to fetch the contents of a privileged locati... |
| CVE-2024-6351 | MEDIUM | 4.3 | 0.2% | Jan 28, 2025 | A malformed packet can cause a buffer overflow in the NWK/APS layer of the Ember ZNet stack and lead to an assert |
| CVE-2024-11954 | MEDIUM | 4.8 | 1.0% | Jan 28, 2025 | A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vulnerability is an unknown func... |
| CVE-2024-23953 | MEDIUM | 6.5 | 1.1% | Jan 28, 2025 | Use of Arrays.equals() in LlapSignerImpl in Apache Hive to compare message signatures allows attacker to forge a valid s... |
| CVE-2024-13527 | MEDIUM | 5.4 | 0.2% | Jan 28, 2025 | The Philantro – Donations and Donor Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2024-13521 | MEDIUM | 5.4 | 0.1% | Jan 28, 2025 | The MailUp Auto Subscription plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and... |
| CVE-2024-13509 | MEDIUM | 6.1 | 0.3% | Jan 28, 2025 | The WS Form LITE and PRO plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the url parameter in al... |
| CVE-2024-12807 | MEDIUM | 4.8 | 0.3% | Jan 28, 2025 | The Social Share Buttons for WordPress plugin through 2.7 does not sanitise and escape some of its settings, which could... |
| CVE-2024-12723 | MEDIUM | 6.1 | 0.3% | Jan 28, 2025 | The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in... |
| CVE-2024-53881 | MEDIUM | 5.5 | 0.1% | Jan 28, 2025 | NVIDIA vGPU software contains a vulnerability in the host driver, where it can allow a guest to cause an interrupt storm... |
| CVE-2024-53869 | MEDIUM | 5.5 | 0.2% | Jan 28, 2025 | NVIDIA Unified Memory driver for Linux contains a vulnerability where an attacker could leak uninitialized memory. A suc... |
| CVE-2024-0147 | MEDIUM | 5.5 | 0.2% | Jan 28, 2025 | NVIDIA GPU display driver for Windows and Linux contains a vulnerability where referencing memory after it has been free... |
| CVE-2024-0140 | MEDIUM | 6.8 | 0.2% | Jan 28, 2025 | NVIDIA RAPIDS contains a vulnerability in cuDF and cuML, where a user could cause a deserialization of untrusted data is... |
| CVE-2024-0137 | MEDIUM | 6.5 | 0.3% | Jan 28, 2025 | NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le... |
| CVE-2024-45341 | MEDIUM | 6.1 | 0.5% | Jan 28, 2025 | A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that appl... |
| CVE-2024-45336 | MEDIUM | 6.1 | 0.6% | Jan 28, 2025 | The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ contai... |
| CVE-2024-22315 | MEDIUM | 6.5 | 0.2% | Jan 28, 2025 | IBM Fusion and IBM Fusion HCI 2.3.0 through 2.8.2 is vulnerable to insecure network connection by allowing an attacker w... |
| CVE-2024-27263 | MEDIUM | 5.3 | 0.3% | Jan 28, 2025 | IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to obt... |
| CVE-2024-28786 | MEDIUM | 6.5 | 0.2% | Jan 28, 2025 | IBM QRadar SIEM 7.5 transmits sensitive or security-critical data in cleartext in a communication channel that could be ... |
| CVE-2024-56178 | MEDIUM | 6.5 | 0.3% | Jan 27, 2025 | An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the security_admin_local role can create a ... |
| CVE-2024-54728 | MEDIUM | 6.5 | 0.3% | Jan 27, 2025 | Incorrect access control in BYD QIN PLUS DM-i Dilink OS 3.0_13.1.7.2204050.1 allows unauthorized attackers to access sys... |
| CVE-2024-48662 | MEDIUM | 6.1 | 0.3% | Jan 27, 2025 | Cross Site Scripting vulnerability in AdGuard Application v.7.18.1 (4778) and before allows an attacker to execute arbit... |
| CVE-2024-54550 | MEDIUM | 4 | 0.2% | Jan 27, 2025 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.2 and iPadOS 18... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now