2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6444 | MEDIUM | 6.5 | 0.3% | Oct 4, 2024 | No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.... |
| CVE-2024-9242 | MEDIUM | 5.4 | 0.3% | Oct 4, 2024 | The Memberful – Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'me... |
| CVE-2024-8804 | MEDIUM | 5.4 | 0.2% | Oct 4, 2024 | The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's script embed functiona... |
| CVE-2024-6443 | MEDIUM | 6.5 | 0.6% | Oct 4, 2024 | In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is e... |
| CVE-2024-6442 | MEDIUM | 6.5 | 0.3% | Oct 4, 2024 | In ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow. |
| CVE-2024-47855 | MEDIUM | 5.3 | 15.4% | Oct 4, 2024 | util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. |
| CVE-2024-47854 | MEDIUM | 6.1 | 0.7% | Oct 4, 2024 | An XSS vulnerability was discovered in Veritas Data Insight before 7.1. It allows a remote attacker to inject an arbitra... |
| CVE-2024-9445 | MEDIUM | 5.4 | 0.3% | Oct 4, 2024 | The Display Medium Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's display_medi... |
| CVE-2024-9421 | MEDIUM | 5.4 | 0.3% | Oct 4, 2024 | The Login Logout Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter i... |
| CVE-2024-9384 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site... |
| CVE-2024-9375 | MEDIUM | 6.1 | 0.3% | Oct 4, 2024 | The WordPress Captcha Plugin by Captcha Bank plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to... |
| CVE-2024-9372 | MEDIUM | 5.4 | 0.2% | Oct 4, 2024 | The WP Blocks Hub plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions... |
| CVE-2024-9368 | MEDIUM | 5.4 | 0.2% | Oct 4, 2024 | The Aggregator Advanced Settings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads ... |
| CVE-2024-9353 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Popularis Extra plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg... |
| CVE-2024-9349 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2024-9345 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du... |
| CVE-2024-9237 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Fish and Ships – Most flexible shipping table rate. A WooCommerce shipping rate plugin for WordPress is vulnerable t... |
| CVE-2024-9204 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER['REQUE... |
| CVE-2024-8802 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Clio Grow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg witho... |
| CVE-2024-8520 | MEDIUM | 4.3 | 0.3% | Oct 4, 2024 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2024-8519 | MEDIUM | 5.4 | 0.4% | Oct 4, 2024 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2024-44207 | MEDIUM | 4.3 | 9.2% | Oct 4, 2024 | This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Me... |
| CVE-2024-44204 | MEDIUM | 5.5 | 4.9% | Oct 4, 2024 | A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's save... |
| CVE-2024-9266 | MEDIUM | 4.7 | 0.4% | Oct 3, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the ... |
| CVE-2024-41591 | MEDIUM | 6.1 | 0.2% | Oct 3, 2024 | DrayTek Vigor3910 devices through 4.3.2.6 allow unauthenticated DOM-based reflected XSS. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now