2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-57882 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported t... |
| CVE-2024-57857 | HIGH | 7.8 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Remove direct link to net_device Do not ... |
| CVE-2024-57844 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If user... |
| CVE-2024-57841 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcp_conn_request() If inet... |
| CVE-2024-57802 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Sy... |
| CVE-2024-57801 | HIGH | 7.8 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Skip restore TC rules for vport rep with... |
| CVE-2024-57795 | HIGH | 7.8 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Remove the direct link to net_device The... |
| CVE-2024-54031 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on s... |
| CVE-2024-53681 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: nvmet: Don't overflow subsysnqn nvmet_root_discove... |
| CVE-2024-39282 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix FSM command timeout issue Whe... |
| CVE-2024-36476 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ib_sge list' is accessible Move... |
| CVE-2024-13215 | MEDIUM | 4.3 | 0.5% | Jan 15, 2025 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,... |
| CVE-2024-11029 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence... |
| CVE-2024-12593 | MEDIUM | 6.4 | 0.4% | Jan 15, 2025 | The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2024-11851 | MEDIUM | 4.3 | 0.3% | Jan 15, 2025 | The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability ... |
| CVE-2024-11848 | HIGH | 8.1 | 0.6% | Jan 15, 2025 | The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2024-35280 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDe... |
| CVE-2024-9636 | CRITICAL | 9.8 | 0.8% | Jan 15, 2025 | The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in versions 2.2.85 to 2.3.... |
| CVE-2024-13351 | HIGH | 7.2 | 0.3% | Jan 15, 2025 | The Social proof testimonials and reviews by Repuso plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi... |
| CVE-2024-12818 | MEDIUM | 6.4 | 0.3% | Jan 15, 2025 | The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' sho... |
| CVE-2024-12423 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-12403 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-12297 | CRITICAL | 9.2 | 0.8% | Jan 15, 2025 | Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Althou... |
| CVE-2024-10775 | MEDIUM | 4.3 | 0.3% | Jan 15, 2025 | The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i... |
| CVE-2024-7322 | MEDIUM | 5.8 | 0.3% | Jan 15, 2025 | A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is re... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now