2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-13049 | HIGH | 7.8 | 0.2% | Dec 30, 2024 | Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2024-13048 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13047 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remot... |
| CVE-2024-13046 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13045 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability... |
| CVE-2024-13044 | HIGH | 7.8 | 0.2% | Dec 30, 2024 | Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows ... |
| CVE-2024-13043 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers t... |
| CVE-2024-12753 | HIGH | 7.3 | 0.3% | Dec 30, 2024 | Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to e... |
| CVE-2024-12752 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Foxit PDF Reader AcroForm Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attack... |
| CVE-2024-12751 | HIGH | 7.8 | 0.4% | Dec 30, 2024 | Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attac... |
| CVE-2024-11944 | HIGH | 8.8 | 1.6% | Dec 30, 2024 | iXsystems TrueNAS CORE tarfile.extractall Directory Traversal Remote Code Execution Vulnerability. This vulnerability al... |
| CVE-2024-56800 | HIGH | 7.4 | 0.3% | Dec 30, 2024 | Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions pr... |
| CVE-2024-12836 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2024-12835 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerabilit... |
| CVE-2024-12834 | HIGH | 7.8 | 0.4% | Dec 30, 2024 | Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability all... |
| CVE-2024-12828 | HIGH | 8.8 | 32.0% | Dec 30, 2024 | Webmin CGI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ... |
| CVE-2024-50703 | HIGH | 8.1 | 0.4% | Dec 30, 2024 | TeamPass before 3.1.3.1 does not properly prevent a user from acting with the privileges of a different user_id. |
| CVE-2024-54181 | HIGH | 7.2 | 1.0% | Dec 30, 2024 | IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to exe... |
| CVE-2024-47925 | HIGH | 7.5 | 0.5% | Dec 30, 2024 | Tecnick TCExam – Multiple CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-47924 | HIGH | 7.5 | 0.5% | Dec 30, 2024 | Boa web server – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-47922 | HIGH | 7.5 | 0.5% | Dec 30, 2024 | Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2024-47921 | HIGH | 8.4 | 0.2% | Dec 30, 2024 | Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm |
| CVE-2024-47920 | HIGH | 7.5 | 0.5% | Dec 30, 2024 | Tiki Wiki CMS – CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-47917 | HIGH | 7.5 | 0.5% | Dec 30, 2024 | CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2024-13039 | HIGH | 8.8 | 0.5% | Dec 30, 2024 | A vulnerability was found in code-projects Simple Chat System 1.0. It has been rated as critical. Affected by this issue... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now