2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8582 | MEDIUM | 6.1 | 0.4% | Sep 8, 2024 | A vulnerability was found in SourceCodester Food Ordering Management System 1.0 and classified as problematic. Affected ... |
| CVE-2024-42342 | MEDIUM | 4.3 | 0.3% | Sep 8, 2024 | Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') |
| CVE-2024-42341 | MEDIUM | 6.1 | 0.2% | Sep 8, 2024 | Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') |
| CVE-2024-8572 | MEDIUM | 6.1 | 0.4% | Sep 8, 2024 | A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affect... |
| CVE-2024-8571 | MEDIUM | 5.3 | 0.4% | Sep 8, 2024 | A vulnerability was found in erjemin roll_cms up to 1484fe2c4e0805946a7bcf46218509fcb34883a9. It has been classified as ... |
| CVE-2024-6925 | MEDIUM | 4.3 | 0.2% | Sep 8, 2024 | The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could ... |
| CVE-2024-6859 | MEDIUM | 5.4 | 0.2% | Sep 8, 2024 | The WP MultiTasking WordPress plugin through 0.1.12 does not validate and escape some of its shortcode attributes befor... |
| CVE-2024-6856 | MEDIUM | 4.3 | 0.2% | Sep 8, 2024 | The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which... |
| CVE-2024-6855 | MEDIUM | 4.3 | 0.2% | Sep 8, 2024 | The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating exit popups, which could all... |
| CVE-2024-6853 | MEDIUM | 4.3 | 0.2% | Sep 8, 2024 | The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating welcome popups, which could ... |
| CVE-2024-6852 | MEDIUM | 4.3 | 0.2% | Sep 8, 2024 | The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check in place when updating its settings, which... |
| CVE-2024-8566 | MEDIUM | 6.1 | 0.4% | Sep 8, 2024 | A vulnerability classified as problematic was found in code-projects Online Shop Store 1.0. This vulnerability affects u... |
| CVE-2024-8563 | MEDIUM | 6.1 | 0.4% | Sep 7, 2024 | A vulnerability was found in SourceCodester PHP CRUD 1.0. It has been classified as problematic. This affects an unknown... |
| CVE-2024-8562 | MEDIUM | 6.1 | 0.3% | Sep 7, 2024 | A vulnerability was found in SourceCodester PHP CRUD 1.0 and classified as problematic. Affected by this issue is some u... |
| CVE-2024-42022 | MEDIUM | 5.3 | 0.3% | Sep 7, 2024 | An incorrect permission assignment vulnerability allows an attacker to modify product configuration files. |
| CVE-2024-42021 | MEDIUM | 6.5 | 0.3% | Sep 7, 2024 | An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials. |
| CVE-2024-42020 | MEDIUM | 5.4 | 0.4% | Sep 7, 2024 | A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection. |
| CVE-2024-8558 | MEDIUM | 4.3 | 0.6% | Sep 7, 2024 | A vulnerability classified as problematic was found in SourceCodester Food Ordering Management System 1.0. This vulnerab... |
| CVE-2024-8555 | MEDIUM | 6.1 | 0.6% | Sep 7, 2024 | A vulnerability was found in SourceCodester Clinics Patient Management System 2.0. It has been classified as problematic... |
| CVE-2024-8554 | MEDIUM | 5.4 | 0.5% | Sep 7, 2024 | A vulnerability was found in SourceCodester Clinics Patient Management System 2.0 and classified as problematic. This is... |
| CVE-2024-40680 | MEDIUM | 5.5 | 0.2% | Sep 7, 2024 | IBM MQ 9.3 CD and 9.4 LTS/CD could allow a local user to cause a denial of service due to improper memory allocation cau... |
| CVE-2024-7620 | MEDIUM | 6.6 | 0.7% | Sep 7, 2024 | The Customizer Export/Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid... |
| CVE-2024-7112 | MEDIUM | 6.5 | 0.5% | Sep 7, 2024 | The Pinpoint Booking System – #1 WordPress Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the ‘s... |
| CVE-2024-6010 | MEDIUM | 5.3 | 0.4% | Sep 7, 2024 | The Cost Calculator Builder PRO plugin for WordPress is vulnerable to price manipulation in all versions up to, and incl... |
| CVE-2024-1596 | MEDIUM | 6.1 | 0.4% | Sep 7, 2024 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded file (e... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now