2024 CVE Vulnerabilities
39,223 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-53681 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: nvmet: Don't overflow subsysnqn nvmet_root_discove... |
| CVE-2024-39282 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix FSM command timeout issue Whe... |
| CVE-2024-36476 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ib_sge list' is accessible Move... |
| CVE-2024-13215 | MEDIUM | 4.3 | 0.5% | Jan 15, 2025 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,... |
| CVE-2024-11029 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence... |
| CVE-2024-12593 | MEDIUM | 6.4 | 0.4% | Jan 15, 2025 | The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2024-11851 | MEDIUM | 4.3 | 0.3% | Jan 15, 2025 | The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability ... |
| CVE-2024-11848 | HIGH | 8.1 | 0.6% | Jan 15, 2025 | The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2024-35280 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDe... |
| CVE-2024-9636 | CRITICAL | 9.8 | 0.8% | Jan 15, 2025 | The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in versions 2.2.85 to 2.3.... |
| CVE-2024-13351 | HIGH | 7.2 | 0.3% | Jan 15, 2025 | The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi... |
| CVE-2024-12818 | MEDIUM | 6.4 | 0.3% | Jan 15, 2025 | The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' sho... |
| CVE-2024-12423 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-12403 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-12297 | CRITICAL | 9.2 | 0.8% | Jan 15, 2025 | Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Althou... |
| CVE-2024-10775 | MEDIUM | 4.3 | 0.3% | Jan 15, 2025 | The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i... |
| CVE-2024-7322 | MEDIUM | 5.8 | 0.3% | Jan 15, 2025 | A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is re... |
| CVE-2024-4227 | HIGH | 7.5 | 0.7% | Jan 15, 2025 | In Genivia gSOAP with a specific configuration an unauthenticated remote attacker can generate a high CPU load when forc... |
| CVE-2024-11870 | MEDIUM | 6.4 | 0.3% | Jan 15, 2025 | The Event Registration Calendar By vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi... |
| CVE-2024-55577 | HIGH | 7 | 0.3% | Jan 15, 2025 | Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file wh... |
| CVE-2024-13394 | MEDIUM | 6.4 | 0.4% | Jan 15, 2025 | The ViewMedica 9 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'viewmedica' shortco... |
| CVE-2024-13334 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Car Demon plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search_condition' parameter ... |
| CVE-2024-57767 | HIGH | 8.6 | 0.4% | Jan 15, 2025 | MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download. |
| CVE-2024-57766 | CRITICAL | 9.1 | 0.5% | Jan 15, 2025 | MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table... |
| CVE-2024-57765 | HIGH | 7.5 | 0.4% | Jan 15, 2025 | MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now