2024 CVE Vulnerabilities
39,225 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-46327 | MEDIUM | 5.7 | 0.4% | Sep 26, 2024 | An issue in the Http_handle object of VONETS VAP11G-300 v3.3.23.6.9 allows attackers to access sensitive files via a dir... |
| CVE-2024-31899 | MEDIUM | 4.3 | 0.2% | Sep 26, 2024 | IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user ... |
| CVE-2024-8633 | MEDIUM | 4.8 | 0.3% | Sep 26, 2024 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored ... |
| CVE-2024-8725 | MEDIUM | 5.4 | 0.4% | Sep 26, 2024 | Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a... |
| CVE-2024-9198 | MEDIUM | 5.4 | 0.2% | Sep 26, 2024 | Vulnerability in Clibo Manager v1.1.9.1 that could allow an attacker to execute an stored Cross-Site Scripting (stored X... |
| CVE-2024-9173 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versio... |
| CVE-2024-9127 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alignment’ parameter i... |
| CVE-2024-9125 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The king_IE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to... |
| CVE-2024-9117 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The Mapplic Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions ... |
| CVE-2024-9115 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The Common Tools for Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all ... |
| CVE-2024-9025 | MEDIUM | 5.3 | 0.4% | Sep 26, 2024 | The Sight – Professional Image Gallery and Portfolio plugin for WordPress is vulnerable to unauthorized access of data d... |
| CVE-2024-8872 | MEDIUM | 6.1 | 0.4% | Sep 26, 2024 | The Store Hours for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of a... |
| CVE-2024-47337 | MEDIUM | 4.3 | 0.3% | Sep 26, 2024 | Missing Authorization vulnerability in Phillip Dane Joy Of Text Lite joy-of-text.This issue affects Joy Of Text Lite: fr... |
| CVE-2024-47044 | MEDIUM | 5.3 | 0.4% | Sep 26, 2024 | Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to... |
| CVE-2024-8861 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2024-47145 | MEDIUM | 4.3 | 0.2% | Sep 26, 2024 | Mattermost versions 9.5.x <= 9.5.8 fail to properly authorize access to archived channels when viewing archived channels... |
| CVE-2024-47003 | MEDIUM | 6.5 | 0.6% | Sep 26, 2024 | Mattermost versions 9.11.x <= 9.11.0 and 9.5.x <= 9.5.8 fail to validate that the message of the permalink post is a str... |
| CVE-2024-45843 | MEDIUM | 5.4 | 0.2% | Sep 26, 2024 | Mattermost versions 9.5.x <= 9.5.8 fail to include the metadata endpoints of Oracle Cloud and Alibaba in the SSRF denyli... |
| CVE-2024-42406 | MEDIUM | 5.4 | 0.2% | Sep 26, 2024 | Mattermost versions 9.11.x <= 9.11.0, 9.10.x <= 9.10.1, 9.9.x <= 9.9.2 and 9.5.x <= 9.5.8 fail to properly authorize req... |
| CVE-2024-6517 | MEDIUM | 6.1 | 0.6% | Sep 26, 2024 | The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise and escape a parameter before outputtin... |
| CVE-2024-45836 | MEDIUM | 6.1 | 0.2% | Sep 26, 2024 | Cross-site scripting vulnerability exists in the web management page of PLANEX COMMUNICATIONS network cameras. If a logg... |
| CVE-2024-45372 | MEDIUM | 6.5 | 0.2% | Sep 26, 2024 | MZK-DP300N firmware versions 1.04 and earlier contains a cross-site request forger vulnerability. Viewing a malicious pa... |
| CVE-2024-8803 | MEDIUM | 6.1 | 0.4% | Sep 26, 2024 | The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use ... |
| CVE-2024-8723 | MEDIUM | 5.4 | 0.3% | Sep 26, 2024 | The 012 Ps Multi Languages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via translated titles in al... |
| CVE-2024-8552 | MEDIUM | 4.3 | 0.4% | Sep 26, 2024 | The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now