2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-54348 | MEDIUM | 6.5 | 0.2% | Dec 16, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yaycommerce Brand ... |
| CVE-2024-54285 | CRITICAL | 9.1 | 0.5% | Dec 16, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in SeedProd LLC SeedProd Pro allows Upload a Web Shell to ... |
| CVE-2024-54284 | HIGH | 7.6 | 0.5% | Dec 16, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SeedProd LLC SeedP... |
| CVE-2024-54283 | HIGH | 7.6 | 0.5% | Dec 16, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SeedProd LLC SeedP... |
| CVE-2024-54280 | CRITICAL | 9.8 | 0.6% | Dec 16, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Iqonic Design WPBo... |
| CVE-2024-54279 | HIGH | 7.5 | 0.5% | Dec 16, 2024 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Tobias Keller WP-NERD Toolki... |
| CVE-2024-54257 | HIGH | 7.1 | 0.3% | Dec 16, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molefed allows Ref... |
| CVE-2024-54249 | HIGH | 7.1 | 0.3% | Dec 16, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jules Colle Advanc... |
| CVE-2024-54229 | CRITICAL | 9.8 | 0.4% | Dec 16, 2024 | Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Es... |
| CVE-2024-43234 | CRITICAL | 9.8 | 0.6% | Dec 16, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in WofficeIO Woffice woffice allows Authenticatio... |
| CVE-2024-12654 | MEDIUM | 5.5 | 0.3% | Dec 16, 2024 | A vulnerability classified as problematic was found in FabulaTech USB over Network 6.0.6.1. Affected by this vulnerabili... |
| CVE-2024-12653 | MEDIUM | 5.5 | 0.4% | Dec 16, 2024 | A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the functio... |
| CVE-2024-56015 | HIGH | 7.1 | 0.2% | Dec 16, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: ... |
| CVE-2024-56013 | HIGH | 8.8 | 0.6% | Dec 16, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in wovax Wovax IDX wovax-idx allows Authenticatio... |
| CVE-2024-56012 | CRITICAL | 9.8 | 0.3% | Dec 16, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in lizeipe Flash News / Post (Responsive) flashnews-fading-effect-pearlb... |
| CVE-2024-56011 | MEDIUM | 6.5 | 0.3% | Dec 16, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ilja Zaglov Respon... |
| CVE-2024-56009 | MEDIUM | 5.3 | 0.4% | Dec 16, 2024 | Missing Authorization vulnerability in spreadr Spreadr Woocommerce spreadr-for-woocomerce allows Accessing Functionality... |
| CVE-2024-56007 | MEDIUM | 4.3 | 0.3% | Dec 16, 2024 | Missing Authorization vulnerability in leader codes Leader leader allows Exploiting Incorrectly Configured Access Contro... |
| CVE-2024-56005 | MEDIUM | 6.5 | 0.2% | Dec 16, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery... |
| CVE-2024-56004 | MEDIUM | 5.4 | 0.4% | Dec 16, 2024 | Missing Authorization vulnerability in awfowler Easy Site Importer easy-site-importer allows Exploiting Incorrectly Conf... |
| CVE-2024-56001 | MEDIUM | 6.5 | 0.4% | Dec 16, 2024 | Missing Authorization vulnerability in ksher thailand Ksher ksher-payment allows Exploiting Incorrectly Configured Acces... |
| CVE-2024-55998 | MEDIUM | 5.4 | 0.4% | Dec 16, 2024 | Missing Authorization vulnerability in Eric Sloan Popup Surveys & Polls for WordPress (Mare.io) popup-surveys allows Exp... |
| CVE-2024-55996 | MEDIUM | 6.1 | 0.3% | Dec 16, 2024 | Missing Authorization vulnerability in dreamfox Dreamfox Media Payment gateway per Product for Woocommerce woocommerce-p... |
| CVE-2024-55994 | MEDIUM | 4.3 | 0.5% | Dec 16, 2024 | Missing Authorization vulnerability in sohu 畅言评论系统 changyan allows Exploiting Incorrectly Configured Access Control Secu... |
| CVE-2024-55993 | MEDIUM | 5.3 | 0.5% | Dec 16, 2024 | Missing Authorization vulnerability in PickPlugins Job Board Manager job-board-manager allows Exploiting Incorrectly Con... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now