2024 CVE Vulnerabilities

39,256 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-51845HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in richteam Share But...
CVE-2024-48939HIGH7.5Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use o...
CVE-2024-41992HIGH8.8Wi-Fi Alliance wfa_dut (in Wi-Fi Test Suite) through 9.0.0 allows OS command injection via 802.11x frames because the sy...
CVE-2024-11061HIGH8.8A vulnerability classified as critical was found in Tenda AC10 16.03.10.13. Affected by this vulnerability is the functi...
CVE-2024-11058HIGH7.2A vulnerability was found in CodeAstro Real Estate Management System up to 1.0. It has been declared as critical. This v...
CVE-2024-46956HIGH7.8An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Out-of-bounds data access in filenameforal...
CVE-2024-46954HIGH7.8An issue was discovered in decode_utf8 in base/gp_utf8.c in Artifex Ghostscript before 10.04.0. Overlong UTF-8 encoding ...
CVE-2024-46953HIGH7.8An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the f...
CVE-2024-46952HIGH7.8An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handl...
CVE-2024-46951HIGH7.8An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pa...
CVE-2024-11056HIGH8.8A vulnerability, which was classified as critical, was found in Tenda AC10 16.03.10.13. Affected is the function FUN_004...
CVE-2024-10958HIGH7.3The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrendere...
CVE-2024-11051HIGH8.8A vulnerability was found in AMTT Hotel Broadband Operation System up to 3.0.3.151204. It has been classified as critica...
CVE-2024-51608HIGH8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in colinph970 AmaDisc...
CVE-2024-51606HIGH8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Blrt Blrt WP Embed...
CVE-2024-51647HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in Chaser324 Featured Posts Scroll allows Stored XSS.This issue affects ...
CVE-2024-51630HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in Lars Schenk Responsive Flickr Gallery responsive-flickr-gallery allow...
CVE-2024-51623HIGH8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mehral WP EIS wp-e...
CVE-2024-51706HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Upeksha Wisidagama...
CVE-2024-51705HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jamesdbruner WP MM...
CVE-2024-51704HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in John Hanusek imPre...
CVE-2024-51703HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in laura20 WP-Basics ...
CVE-2024-51702HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ben.moody SrcSet R...
CVE-2024-51701HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mahesh Waghmare MG...
CVE-2024-51699HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buooy Buooy Sticky...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now