2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8317 | MEDIUM | 5.4 | 0.3% | Sep 6, 2024 | The WP AdCenter – Ad Manager & Adsense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ad... |
| CVE-2024-45751 | MEDIUM | 5.9 | 0.5% | Sep 6, 2024 | tgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed ... |
| CVE-2024-7415 | MEDIUM | 5.3 | 0.4% | Sep 6, 2024 | The Remember Me Controls plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including... |
| CVE-2024-40865 | MEDIUM | 5.3 | 0.4% | Sep 6, 2024 | The issue was addressed by suspending Persona when the virtual keyboard is active. This issue is fixed in visionOS 1.3. ... |
| CVE-2024-44082 | MEDIUM | 4.3 | 0.5% | Sep 6, 2024 | In OpenStack Ironic before 26.0.1 and ironic-python-agent before 9.13.1, there is a vulnerability in image processing, i... |
| CVE-2024-45400 | MEDIUM | 6.1 | 0.3% | Sep 6, 2024 | ckeditor-plugin-openlink is a plugin for the CKEditor JavaScript text editor that extends the context menu with a possib... |
| CVE-2024-39278 | MEDIUM | 4.6 | 0.2% | Sep 5, 2024 | Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow... |
| CVE-2024-45157 | MEDIUM | 5.1 | 0.2% | Sep 5, 2024 | An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used... |
| CVE-2024-42491 | MEDIUM | 5.7 | 0.6% | Sep 5, 2024 | Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.24.3, 20.9.3, and 21.4.3 of Asterisk and ... |
| CVE-2024-45392 | MEDIUM | 4.3 | 0.3% | Sep 5, 2024 | SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficien... |
| CVE-2024-44728 | MEDIUM | 6.1 | 0.3% | Sep 5, 2024 | Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, ... |
| CVE-2024-45589 | MEDIUM | 5.9 | 0.9% | Sep 5, 2024 | RapidIdentity LTS through 2023.0.2 and Cloud through 2024.08.0 improperly restricts excessive authentication attempts an... |
| CVE-2024-45176 | MEDIUM | 6.1 | 0.9% | Sep 5, 2024 | An issue was discovered in za-internet C-MOR Video Surveillance 5.2401. Due to improper input validation, the C-MOR web ... |
| CVE-2024-45096 | MEDIUM | 6.5 | 0.4% | Sep 5, 2024 | IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user with access to the package to obtain sensitive information thro... |
| CVE-2024-8445 | MEDIUM | 5.7 | 0.4% | Sep 5, 2024 | The fix for CVE-2024-2199 in 389-ds-base was insufficient to cover all scenarios. In certain product versions, an authen... |
| CVE-2024-8473 | MEDIUM | 6.1 | 0.3% | Sep 5, 2024 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t... |
| CVE-2024-8472 | MEDIUM | 6.1 | 0.3% | Sep 5, 2024 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t... |
| CVE-2024-8471 | MEDIUM | 6.1 | 0.2% | Sep 5, 2024 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t... |
| CVE-2024-8462 | MEDIUM | 6.3 | 0.5% | Sep 5, 2024 | A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of... |
| CVE-2024-8461 | MEDIUM | 5.3 | 1.9% | Sep 5, 2024 | A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part ... |
| CVE-2024-8460 | MEDIUM | 5.9 | 2.1% | Sep 5, 2024 | A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue i... |
| CVE-2024-7605 | MEDIUM | 4.3 | 0.4% | Sep 5, 2024 | The HelloAsso plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2024-7381 | MEDIUM | 5.3 | 0.3% | Sep 5, 2024 | The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization a... |
| CVE-2024-7380 | MEDIUM | 4.3 | 0.3% | Sep 5, 2024 | The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability c... |
| CVE-2024-5956 | MEDIUM | 5.3 | 0.4% | Sep 5, 2024 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now