2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-40695 | HIGH | 8 | 0.4% | Dec 20, 2024 | IBM Cognos Analytics 11.2.0 through 11.2.4 FP4 and 12.0.0 through 12.0.4 could be vulnerable to malicious file uplo... |
| CVE-2024-28767 | HIGH | 8.8 | 0.6% | Dec 20, 2024 | IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated at... |
| CVE-2024-11297 | HIGH | 7.5 | 0.6% | Dec 20, 2024 | The Page Restriction WordPress (WP) – Protect WP Pages/Post plugin for WordPress is vulnerable to Sensitive Information ... |
| CVE-2024-21549 | HIGH | 8.6 | 0.6% | Dec 20, 2024 | Versions of the package spatie/browsershot before 5.0.3 are vulnerable to Improper Input Validation due to improper URL ... |
| CVE-2024-44195 | HIGH | 7.5 | 0.7% | Dec 20, 2024 | A logic issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.1. An app may be able to r... |
| CVE-2024-54538 | HIGH | 7.5 | 0.9% | Dec 20, 2024 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.... |
| CVE-2024-12831 | HIGH | 7.8 | 0.2% | Dec 20, 2024 | Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local... |
| CVE-2024-12830 | HIGH | 7.3 | 1.0% | Dec 20, 2024 | Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows rem... |
| CVE-2024-12829 | HIGH | 8.8 | 1.3% | Dec 20, 2024 | Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remo... |
| CVE-2024-54663 | HIGH | 7.5 | 0.6% | Dec 19, 2024 | An issue was discovered in the Webmail Classic UI in Zimbra Collaboration (ZCS) 9.0 and 10.0 and 10.1. A Local File Incl... |
| CVE-2024-12700 | HIGH | 8.8 | 0.6% | Dec 19, 2024 | There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to up... |
| CVE-2024-12729 | HIGH | 8.8 | 1.3% | Dec 19, 2024 | A post-auth code injection vulnerability in the User Portal allows authenticated users to execute code remotely in Sopho... |
| CVE-2024-12672 | HIGH | 7.3 | 0.2% | Dec 19, 2024 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the... |
| CVE-2024-12175 | HIGH | 7.8 | 0.3% | Dec 19, 2024 | Another “use after free” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat... |
| CVE-2024-11364 | HIGH | 7.3 | 0.3% | Dec 19, 2024 | Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow ... |
| CVE-2024-11157 | HIGH | 7.3 | 0.2% | Dec 19, 2024 | A third-party vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to write beyond the... |
| CVE-2024-12111 | HIGH | 8 | 0.4% | Dec 19, 2024 | In a specific scenario a LDAP user can abuse the authentication process using injection attack in OpenText Privileged Ac... |
| CVE-2024-56200 | HIGH | 8.6 | 0.6% | Dec 19, 2024 | Altair is a fork of Misskey v12. Affected versions lack of request validation and lack of authentication in the image pr... |
| CVE-2024-55196 | HIGH | 7.5 | 0.4% | Dec 19, 2024 | Insufficiently Protected Credentials in the Mail Server Configuration in GoPhish v0.12.1 allows an attacker to access cl... |
| CVE-2024-38819 | HIGH | 7.5 | 54.9% | Dec 19, 2024 | Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to pa... |
| CVE-2024-12790 | HIGH | 8.2 | 0.5% | Dec 19, 2024 | A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnera... |
| CVE-2024-9154 | HIGH | 8.6 | 0.6% | Dec 19, 2024 | A code injection vulnerability in HMS Networks Ewon Flexy 205 allows executing commands on system level on the device. T... |
| CVE-2024-55082 | HIGH | 7.5 | 0.5% | Dec 19, 2024 | A Server-Side Request Forgery (SSRF) in the endpoint http://{your-server}/url-to-pdf of Stirling-PDF 0.35.1 allows attac... |
| CVE-2024-54790 | HIGH | 7.5 | 0.6% | Dec 19, 2024 | A SQL Injection vulnerability was found in /index.php in PHPGurukul Pre-School Enrollment System v1.0, which allows remo... |
| CVE-2024-25131 | HIGH | 8.8 | 0.8% | Dec 19, 2024 | A flaw was found in the MustGather.managed.openshift.io Custom Defined Resource (CRD) of OpenShift Dedicated. A non-priv... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now