2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-12416 | HIGH | 7.5 | 0.4% | Jan 7, 2025 | The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to SQL Injection via the 'woom... |
| CVE-2024-12402 | CRITICAL | 9.8 | 0.6% | Jan 7, 2025 | The Themes Coder – Create Android & iOS Apps For Your Woocommerce Site plugin for WordPress is vulnerable to privilege e... |
| CVE-2024-12098 | MEDIUM | 6.1 | 0.3% | Jan 7, 2025 | The ARS Affiliate Page Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'utm_keyword'... |
| CVE-2024-12022 | — | — | — | Jan 7, 2025 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-52485. Reason: This candidate is a ... |
| CVE-2024-11934 | MEDIUM | 6.4 | 0.3% | Jan 7, 2025 | The Formaloo Form Maker & Customer Analytics for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2024-11899 | MEDIUM | 6.4 | 0.3% | Jan 7, 2025 | The Slider Pro Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sliderpro' short... |
| CVE-2024-11777 | MEDIUM | 6.4 | 0.3% | Jan 7, 2025 | The Sell Media plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sell_media_search_for... |
| CVE-2024-11437 | MEDIUM | 4.9 | 0.5% | Jan 7, 2025 | The Timeline Designer plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in all versions up to, a... |
| CVE-2024-55553 | HIGH | 7.5 | 0.8% | Jan 6, 2025 | In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via ... |
| CVE-2024-54767 | HIGH | 7.5 | 1.8% | Jan 6, 2025 | An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530 AX v7.59 allows attackers to obtain sen... |
| CVE-2024-54764 | MEDIUM | 6.5 | 1.0% | Jan 6, 2025 | An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensit... |
| CVE-2024-54763 | MEDIUM | 6.5 | 0.7% | Jan 6, 2025 | An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensiti... |
| CVE-2024-53936 | MEDIUM | 6.3 | 0.2% | Jan 6, 2025 | The com.asianmobile.callcolor (aka Color Phone Call Screen App) application through 24 for Android enables any applicati... |
| CVE-2024-53935 | MEDIUM | 6.5 | 0.2% | Jan 6, 2025 | The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables ... |
| CVE-2024-53934 | HIGH | 7.7 | 0.2% | Jan 6, 2025 | The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2... |
| CVE-2024-53933 | MEDIUM | 6.3 | 0.2% | Jan 6, 2025 | The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Andr... |
| CVE-2024-53932 | CRITICAL | 9.1 | 0.3% | Jan 6, 2025 | The com.remi.colorphone.callscreen.calltheme.callerscreen (aka Color Phone: Call Screen Theme) application through 21.1.... |
| CVE-2024-53931 | CRITICAL | 9.1 | 0.3% | Jan 6, 2025 | The com.glitter.caller.screen (aka iCaller, Caller Theme & Dialer) application through 1.1 for Android enables any appli... |
| CVE-2024-51741 | MEDIUM | 4.4 | 0.3% | Jan 6, 2025 | Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may creat... |
| CVE-2024-48457 | HIGH | 7.5 | 3.0% | Jan 6, 2025 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi ... |
| CVE-2024-48456 | HIGH | 7.5 | 17.3% | Jan 6, 2025 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi ... |
| CVE-2024-48455 | LOW | 2.7 | 6.2% | Jan 6, 2025 | An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router NC65 3.0.0.3749 and Netis Wifi ... |
| CVE-2024-46981 | CRITICAL | 9.8 | 7.8% | Jan 6, 2025 | Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua... |
| CVE-2024-55076 | HIGH | 8.1 | 0.3% | Jan 6, 2025 | Grocy through 4.3.0 has no CSRF protection, as demonstrated by changing the Administrator's password. |
| CVE-2024-55075 | MEDIUM | 5.3 | 0.5% | Jan 6, 2025 | Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not sh... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now