2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8369 | MEDIUM | 5.3 | 0.3% | Sep 10, 2024 | The EventPrime – Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to unauthorized access to Priv... |
| CVE-2024-6282 | MEDIUM | 5.4 | 0.3% | Sep 10, 2024 | The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vu... |
| CVE-2024-8645 | MEDIUM | 5.5 | 0.2% | Sep 10, 2024 | SPRT dissector crash in Wireshark 4.2.0 to 4.0.5 and 4.0.0 to 4.0.15 allows denial of service via packet injection or cr... |
| CVE-2024-8543 | MEDIUM | 5.4 | 0.2% | Sep 10, 2024 | The Slider comparison image before and after plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the p... |
| CVE-2024-8241 | MEDIUM | 5.4 | 0.4% | Sep 10, 2024 | The Nova Blocks by Pixelgrade plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'align' attribut... |
| CVE-2024-43781 | MEDIUM | 6.8 | 0.2% | Sep 10, 2024 | A vulnerability has been identified in SINUMERIK 828D V4 (All versions < V4.95 SP3), SINUMERIK 840D sl V4 (All versions ... |
| CVE-2024-42345 | MEDIUM | 4.3 | 0.3% | Sep 10, 2024 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP2). The affected application ... |
| CVE-2024-42344 | MEDIUM | 5.5 | 0.2% | Sep 10, 2024 | A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application ... |
| CVE-2024-37991 | MEDIUM | 6.5 | 0.3% | Sep 10, 2024 | A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC R... |
| CVE-2024-37990 | MEDIUM | 6.5 | 0.4% | Sep 10, 2024 | A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC R... |
| CVE-2024-32006 | MEDIUM | 6.5 | 0.3% | Sep 10, 2024 | A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 SP2). The affected application ... |
| CVE-2024-7698 | MEDIUM | 5.7 | 0.4% | Sep 10, 2024 | A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount C... |
| CVE-2024-42425 | MEDIUM | 5.5 | 0.1% | Sep 10, 2024 | Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer ... |
| CVE-2024-39582 | MEDIUM | 4.4 | 0.1% | Sep 10, 2024 | Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacke... |
| CVE-2024-39580 | MEDIUM | 6.7 | 0.1% | Sep 10, 2024 | Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privilege... |
| CVE-2024-39574 | MEDIUM | 4.4 | 0.1% | Sep 10, 2024 | Dell PowerScale InsightIQ, version 5.1, contain an Improper Privilege Management vulnerability. A high privileged attack... |
| CVE-2024-7734 | MEDIUM | 5.3 | 0.5% | Sep 10, 2024 | An unauthenticated remote attacker can exploit the behavior of the pathfinder TCP encapsulation service by establishing ... |
| CVE-2024-7655 | MEDIUM | 4.8 | 0.3% | Sep 10, 2024 | The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to ... |
| CVE-2024-7618 | MEDIUM | 4.8 | 0.3% | Sep 10, 2024 | The Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin for WordPress is vulnerable to ... |
| CVE-2024-42424 | MEDIUM | 6 | 0.1% | Sep 10, 2024 | Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input Validation vulnerability. A hig... |
| CVE-2024-44072 | MEDIUM | 5.7 | 0.6% | Sep 10, 2024 | OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters. If a user logs in ... |
| CVE-2024-7955 | MEDIUM | 4.8 | 0.4% | Sep 10, 2024 | The Starbox WordPress plugin before 3.5.2 does not sanitise and escape some of its settings, which could allow high pri... |
| CVE-2024-7891 | MEDIUM | 4.8 | 0.3% | Sep 10, 2024 | The Floating Contact Button WordPress plugin before 2.8 does not sanitise and escape some of its settings, which could a... |
| CVE-2024-7784 | MEDIUM | 6.1 | 0.2% | Sep 10, 2024 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device t... |
| CVE-2024-6509 | MEDIUM | 6.5 | 0.4% | Sep 10, 2024 | Marinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi was vulnerable for fil... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now