2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5416 | MEDIUM | 5.4 | 0.4% | Sep 11, 2024 | The Elementor Website Builder – More than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc... |
| CVE-2024-45789 | MEDIUM | 4.3 | 0.2% | Sep 11, 2024 | This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper validation of the ‘mode’ parameter in the API... |
| CVE-2024-45787 | MEDIUM | 6.5 | 0.4% | Sep 11, 2024 | This vulnerability exists in Reedos aiM-Star version 2.0.1 due to transmission of sensitive information in plain text in... |
| CVE-2024-45786 | MEDIUM | 6.5 | 0.4% | Sep 11, 2024 | This vulnerability exists in Reedos aiM-Star version 2.0.1 due to improper access controls on its certain API endpoints.... |
| CVE-2024-8096 | MEDIUM | 6.5 | 0.7% | Sep 11, 2024 | When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify tha... |
| CVE-2024-8045 | MEDIUM | 5.4 | 0.3% | Sep 11, 2024 | The Advanced WordPress Backgrounds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘imageTag’ ... |
| CVE-2024-8440 | MEDIUM | 5.4 | 0.4% | Sep 11, 2024 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress... |
| CVE-2024-7716 | MEDIUM | 4.8 | 0.3% | Sep 11, 2024 | The Logo Slider WordPress plugin before 3.6.9 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2024-3899 | MEDIUM | 4.8 | 0.3% | Sep 11, 2024 | The Gallery Plugin for WordPress WordPress plugin before 1.8.15 does not sanitise and escape some of its image settings... |
| CVE-2024-7727 | MEDIUM | 5.3 | 0.4% | Sep 11, 2024 | The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of ... |
| CVE-2024-7721 | MEDIUM | 4.3 | 0.3% | Sep 11, 2024 | The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modificati... |
| CVE-2024-39808 | MEDIUM | 4.6 | 0.2% | Sep 11, 2024 | Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows ... |
| CVE-2024-24972 | MEDIUM | 6.5 | 0.3% | Sep 11, 2024 | Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface... |
| CVE-2024-23906 | MEDIUM | 6.1 | 0.3% | Sep 11, 2024 | Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnost... |
| CVE-2024-40659 | MEDIUM | 5.5 | 0.1% | Sep 11, 2024 | In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore... |
| CVE-2024-40656 | MEDIUM | 5.5 | 0.1% | Sep 11, 2024 | In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across user... |
| CVE-2024-45597 | MEDIUM | 5.3 | 0.3% | Sep 10, 2024 | Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. Scripts passing user-controlled values to ht... |
| CVE-2024-8441 | MEDIUM | 6.7 | 0.4% | Sep 10, 2024 | An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local auth... |
| CVE-2024-8320 | MEDIUM | 5.3 | 1.2% | Sep 10, 2024 | Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote ... |
| CVE-2024-8655 | MEDIUM | 6.9 | 0.5% | Sep 10, 2024 | A vulnerability was found in Mercury MNVR816 up to 2.0.1.0.5. It has been classified as problematic. This affects an unk... |
| CVE-2024-45596 | MEDIUM | 6.5 | 0.6% | Sep 10, 2024 | Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access cred... |
| CVE-2024-34831 | MEDIUM | 6.1 | 0.9% | Sep 10, 2024 | cross-site scripting (XSS) vulnerability in Gibbon Core v26.0.00 allows an attacker to execute arbitrary code via the im... |
| CVE-2024-44872 | MEDIUM | 6.1 | 0.4% | Sep 10, 2024 | A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the... |
| CVE-2024-43487 | MEDIUM | 6.5 | 1.2% | Sep 10, 2024 | Windows Mark of the Web Security Feature Bypass Vulnerability |
| CVE-2024-43482 | MEDIUM | 6.5 | 1.1% | Sep 10, 2024 | Microsoft Outlook for iOS Information Disclosure Vulnerability |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now