2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9779 | HIGH | 7.5 | 0.4% | Dec 17, 2024 | A flaw was found in Open Cluster Management (OCM) when a user has access to the worker nodes which contain the cluster-m... |
| CVE-2024-51175 | HIGH | 7.5 | 0.3% | Dec 17, 2024 | An issue in H3C switch h3c-S1526 allows a remote attacker to obtain sensitive information via the S1526.cfg component. |
| CVE-2024-49194 | HIGH | 7.3 | 0.7% | Dec 17, 2024 | Databricks JDBC Driver 2.x before 2.6.40 could potentially allow remote code execution (RCE) by triggering a JNDI inject... |
| CVE-2024-51479 | HIGH | 7.5 | 3.9% | Dec 17, 2024 | Next.js is a React framework for building full-stack web applications. In affected versions if a Next.js application is ... |
| CVE-2024-49819 | HIGH | 7.5 | 0.3% | Dec 17, 2024 | IBM Security Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2.0, and 4.2.1 could allow a remote attacker to obtain sensiti... |
| CVE-2024-12671 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12670 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vul... |
| CVE-2024-12669 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vul... |
| CVE-2024-12200 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12199 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12198 | HIGH | 7.8 | 0.5% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12197 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12194 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A... |
| CVE-2024-12193 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12192 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWF file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability.... |
| CVE-2024-12191 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability... |
| CVE-2024-12179 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vul... |
| CVE-2024-12178 | HIGH | 7.8 | 0.3% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A... |
| CVE-2024-11422 | HIGH | 7.8 | 0.4% | Dec 17, 2024 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability... |
| CVE-2024-10476 | HIGH | 8 | 0.2% | Dec 17, 2024 | Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be ab... |
| CVE-2024-36832 | HIGH | 7.5 | 0.4% | Dec 17, 2024 | A NULL pointer dereference in D-Link DAP-1513 REVA_FIRMWARE_1.01 allows attackers to cause a Denial of Service (DoS) via... |
| CVE-2024-8326 | HIGH | 8.8 | 0.6% | Dec 17, 2024 | The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions plugin... |
| CVE-2024-12293 | HIGH | 8.8 | 0.3% | Dec 17, 2024 | The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includi... |
| CVE-2024-11999 | HIGH | 8.8 | 0.6% | Dec 17, 2024 | CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the devic... |
| CVE-2024-9624 | HIGH | 7.6 | 0.4% | Dec 17, 2024 | The WP All Import Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and inclu... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now