2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7817 | MEDIUM | 6.5 | 0.2% | Sep 12, 2024 | The Misiek Photo Album WordPress plugin through 1.4.3 does not have CSRF checks in some places, which could allow attack... |
| CVE-2024-7816 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The Gixaw Chat WordPress plugin through 1.0 does not have CSRF check in some places, and is missing sanitisation as well... |
| CVE-2024-6887 | MEDIUM | 4.8 | 0.4% | Sep 12, 2024 | The Giveaways and Contests by RafflePress WordPress plugin before 1.12.16 does not sanitise and escape some of its Give... |
| CVE-2024-6019 | MEDIUM | 6.1 | 0.3% | Sep 12, 2024 | The Music Request Manager WordPress plugin through 1.3 does not sanitise and escape incoming music requests, which could... |
| CVE-2024-6018 | MEDIUM | 6.1 | 0.3% | Sep 12, 2024 | The Music Request Manager WordPress plugin through 1.3 does not escape the $_SERVER['REQUEST_URI'] parameter before outp... |
| CVE-2024-6017 | MEDIUM | 6.1 | 0.2% | Sep 12, 2024 | The Music Request Manager WordPress plugin through 1.3 does not have CSRF check in some places, and is missing sanitisat... |
| CVE-2024-5799 | MEDIUM | 4.8 | 0.3% | Sep 12, 2024 | The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which cou... |
| CVE-2024-3163 | MEDIUM | 4.3 | 0.2% | Sep 12, 2024 | The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which ... |
| CVE-2024-38222 | MEDIUM | 6.5 | 1.1% | Sep 12, 2024 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2024-8708 | MEDIUM | 6.1 | 0.3% | Sep 12, 2024 | A vulnerability was found in SourceCodester Best House Rental Management System 1.0. It has been rated as problematic. T... |
| CVE-2024-8707 | MEDIUM | 5.3 | 0.5% | Sep 12, 2024 | A vulnerability was found in 云课网络科技有限公司 Yunke Online School System up to 3.0.6. It has been declared as problematic. Thi... |
| CVE-2024-8706 | MEDIUM | 6.5 | 0.7% | Sep 12, 2024 | A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function ... |
| CVE-2024-8705 | MEDIUM | 6.3 | 0.4% | Sep 11, 2024 | A vulnerability was found in Shandong Star Measurement and Control Equipment Heating Network Wireless Monitoring System ... |
| CVE-2024-8694 | MEDIUM | 5.1 | 0.8% | Sep 11, 2024 | A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903. This affects the function u... |
| CVE-2024-8693 | MEDIUM | 5.1 | 0.3% | Sep 11, 2024 | A vulnerability, which was classified as problematic, has been found in Kaon CG3000 1.01.43. Affected by this issue is s... |
| CVE-2024-8690 | MEDIUM | 4.4 | 0.2% | Sep 11, 2024 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with W... |
| CVE-2024-8689 | MEDIUM | 6 | 0.2% | Sep 11, 2024 | A problem with the ActiveMQ integration for both Cortex XSOAR and Cortex XSIAM can result in the cleartext exposure of t... |
| CVE-2024-8688 | MEDIUM | 4.4 | 0.2% | Sep 11, 2024 | An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CL... |
| CVE-2024-8097 | MEDIUM | 6.7 | 0.2% | Sep 11, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Payara Platform Payara Server (Logging modul... |
| CVE-2024-44573 | MEDIUM | 4.7 | 0.3% | Sep 11, 2024 | A stored cross-site scripting (XSS) vulnerability in the VLAN configuration of RELY-PCIe v22.2.1 to v23.1.0 allows attac... |
| CVE-2024-20489 | MEDIUM | 5.5 | 0.1% | Sep 11, 2024 | A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attac... |
| CVE-2024-20390 | MEDIUM | 5.3 | 0.4% | Sep 11, 2024 | A vulnerability in the Dedicated XML Agent feature of Cisco IOS XR Software could allow an unauthenticated, remote attac... |
| CVE-2024-20343 | MEDIUM | 5.5 | 0.1% | Sep 11, 2024 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the... |
| CVE-2024-7312 | MEDIUM | 6.1 | 0.2% | Sep 11, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Payara Platform Payara Server (REST Management Inte... |
| CVE-2024-46672 | MEDIUM | 5.5 | 0.2% | Sep 11, 2024 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: Handle SSID based pmksa d... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now