2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6929 | MEDIUM | 5.4 | 0.3% | Sep 5, 2024 | The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ param... |
| CVE-2024-6894 | MEDIUM | 5.4 | 0.3% | Sep 5, 2024 | The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5... |
| CVE-2024-6332 | MEDIUM | 6.5 | 0.4% | Sep 5, 2024 | The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unaut... |
| CVE-2024-8363 | MEDIUM | 5.4 | 0.4% | Sep 5, 2024 | The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shor... |
| CVE-2024-5309 | MEDIUM | 5.4 | 0.3% | Sep 5, 2024 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modifi... |
| CVE-2024-45107 | MEDIUM | 5.5 | 0.3% | Sep 5, 2024 | Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After F... |
| CVE-2024-6835 | MEDIUM | 5.3 | 0.5% | Sep 5, 2024 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up... |
| CVE-2024-6846 | MEDIUM | 5.3 | 1.3% | Sep 5, 2024 | The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access on some REST routes, allowing for an una... |
| CVE-2024-45429 | MEDIUM | 6.1 | 0.4% | Sep 4, 2024 | Cross-site scripting vulnerability exists in Advanced Custom Fields versions 6.3.5 and earlier and Advanced Custom Field... |
| CVE-2024-2166 | MEDIUM | 6.1 | 0.3% | Sep 4, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Email S... |
| CVE-2024-20506 | MEDIUM | 6.1 | 0.3% | Sep 4, 2024 | A vulnerability in the ClamD service module of Clam AntiVirus (ClamAV) versions 1.4.0, 1.3.2 and prior versions, all 1.2... |
| CVE-2024-45399 | MEDIUM | 6.1 | 0.4% | Sep 4, 2024 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In Indi... |
| CVE-2024-45172 | MEDIUM | 6.8 | 0.4% | Sep 4, 2024 | An issue was discovered in za-internet C-MOR Video Surveillance 5.2401 and 6.00PL01. Due to missing protection mechanism... |
| CVE-2024-45008 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting to... |
| CVE-2024-45007 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Don't destroy workqueue from work i... |
| CVE-2024-45006 | MEDIUM | 5.5 | 0.3% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-... |
| CVE-2024-45005 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix validity interception issue when gis... |
| CVE-2024-45004 | MEDIUM | 5.5 | 0.1% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix leak of blob encryption key... |
| CVE-2024-45003 | MEDIUM | 4.7 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversi... |
| CVE-2024-45002 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: rtla/osnoise: Prevent NULL dereference in error han... |
| CVE-2024-45001 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atom... |
| CVE-2024-45000 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: fs/netfs/fscache_cookie: add missing "n_accesses" c... |
| CVE-2024-44996 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: vsock: fix recursive ->recvmsg calls After a vsock... |
| CVE-2024-44995 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix a deadlock problem when config TC du... |
| CVE-2024-44994 | MEDIUM | 5.5 | 0.2% | Sep 4, 2024 | In the Linux kernel, the following vulnerability has been resolved: iommu: Restore lost return in iommu_report_device_f... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now