2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-13845 | MEDIUM | 5.5 | 0.2% | May 1, 2025 | The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and ... |
| CVE-2024-30145 | MEDIUM | 6.1 | 0.2% | Apr 30, 2025 | Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and ... |
| CVE-2024-30115 | MEDIUM | 5.4 | 0.2% | Apr 30, 2025 | Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the... |
| CVE-2024-6029 | MEDIUM | 5 | 0.2% | Apr 30, 2025 | Tesla Model S Iris Modem Race Condition Firewall Bypass Vulnerability. This vulnerability allows network-adjacent attack... |
| CVE-2024-9877 | MEDIUM | 5.3 | 0.2% | Apr 30, 2025 | : Use of GET Request Method With Sensitive Query Strings vulnerability in ABB ANC, ABB ANC-L, ABB ANC-mini.This issue af... |
| CVE-2024-58099 | MEDIUM | 5.5 | 0.2% | Apr 29, 2025 | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_... |
| CVE-2024-11922 | MEDIUM | 5.4 | 0.2% | Apr 28, 2025 | Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an a... |
| CVE-2024-10635 | MEDIUM | 5.3 | 0.2% | Apr 28, 2025 | Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthent... |
| CVE-2024-13688 | MEDIUM | 5.3 | 0.3% | Apr 28, 2025 | The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protectio... |
| CVE-2024-52888 | MEDIUM | 5.4 | 0.2% | Apr 27, 2025 | For an authenticated end-user the portal may run a script while attempting to display a directory or some file's propert... |
| CVE-2024-52887 | MEDIUM | 5.4 | 0.2% | Apr 27, 2025 | Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing... |
| CVE-2024-13812 | MEDIUM | 6.5 | 0.3% | Apr 26, 2025 | The The Anps Theme plugin plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and... |
| CVE-2024-30147 | MEDIUM | 6.1 | 0.2% | Apr 24, 2025 | Multiple vectors in HCL Leap allow client-side script injection in the authoring environment and deployed applications. |
| CVE-2024-30114 | MEDIUM | 5.4 | 0.2% | Apr 24, 2025 | Insufficient sanitization in HCL Leap allows client-side script injection in the authoring environment. |
| CVE-2024-30113 | MEDIUM | 5.4 | 0.2% | Apr 24, 2025 | Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the... |
| CVE-2024-30148 | MEDIUM | 4.1 | 0.2% | Apr 24, 2025 | Improper access control of endpoint in HCL Leap allows certain admin users to import applications from the server's file... |
| CVE-2024-13307 | MEDIUM | 5.3 | 0.2% | Apr 24, 2025 | The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of d... |
| CVE-2024-12244 | MEDIUM | 4.3 | 0.3% | Apr 24, 2025 | An issue has been discovered in access controls could allow users to view certain restricted project information even wh... |
| CVE-2024-22351 | MEDIUM | 6.3 | 0.2% | Apr 23, 2025 | IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user ... |
| CVE-2024-47829 | MEDIUM | 6.5 | 0.2% | Apr 23, 2025 | pnpm is a package manager. Prior to version 10.0.0, the path shortening function uses the md5 function as a path shorten... |
| CVE-2024-10306 | MEDIUM | 5.4 | 0.3% | Apr 23, 2025 | A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <L... |
| CVE-2024-53569 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | A stored cross-site scripting (XSS) vulnerability in the New Goal Creation section of Volmarg Personal Management System... |
| CVE-2024-53568 | MEDIUM | 5.4 | 0.2% | Apr 22, 2025 | A stored cross-site scripting (XSS) vulnerability in the Image Upload section of Volmarg Personal Management System v1.4... |
| CVE-2024-12543 | MEDIUM | 5.9 | 0.3% | Apr 21, 2025 | User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows... |
| CVE-2024-42699 | MEDIUM | 6.5 | 0.3% | Apr 21, 2025 | Cross Site Scripting vulnerability in Create/Modify article function in Alkacon OpenCMS 17.0 allows remote attacker to i... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now