2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-12101 | — | — | — | Dec 3, 2024 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All r... |
| CVE-2024-11391 | HIGH | 7.5 | 0.7% | Dec 3, 2024 | The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati... |
| CVE-2024-11200 | MEDIUM | 6.1 | 0.3% | Dec 3, 2024 | The Goodlayers Core plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘font-family’ parameter... |
| CVE-2024-9978 | MEDIUM | 5.5 | 0.1% | Dec 3, 2024 | in OpenHarmony v4.1.1 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
| CVE-2024-42422 | HIGH | 7.5 | 0.3% | Dec 3, 2024 | Dell NetWorker, version(s) 19.10, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. An unaut... |
| CVE-2024-12082 | MEDIUM | 5.5 | 0.1% | Dec 3, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
| CVE-2024-10074 | HIGH | 7.8 | 0.2% | Dec 3, 2024 | in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through ... |
| CVE-2024-11326 | MEDIUM | 6.1 | 0.3% | Dec 3, 2024 | The Campaign Monitor Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the ... |
| CVE-2024-47476 | HIGH | 7.8 | 0.1% | Dec 3, 2024 | Dell NetWorker Management Console, version(s) 19.11, contain(s) an Improper Verification of Cryptographic Signature vuln... |
| CVE-2024-45106 | HIGH | 8.1 | 0.5% | Dec 3, 2024 | Improper authentication of an HTTP endpoint in the S3 Gateway of Apache Ozone 1.4.0 allows any authenticated Kerberos us... |
| CVE-2024-12062 | MEDIUM | 4.3 | 0.3% | Dec 3, 2024 | The Charity Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and in... |
| CVE-2024-11782 | MEDIUM | 5.4 | 0.3% | Dec 3, 2024 | The WP Mailster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'mst_subscribe' short... |
| CVE-2024-11325 | MEDIUM | 5.2 | 0.9% | Dec 3, 2024 | The AWeber Forms by Optin Cat plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add... |
| CVE-2024-11866 | MEDIUM | 6.4 | 0.2% | Dec 3, 2024 | The BMLT Tabbed Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bmlt_tabbed_map'... |
| CVE-2024-11844 | MEDIUM | 4.3 | 0.3% | Dec 3, 2024 | The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check o... |
| CVE-2024-11898 | MEDIUM | 5.4 | 0.3% | Dec 3, 2024 | The Scratch & Win – Giveaways and Contests. Boost subscribers, traffic, repeat visits, referrals, sales and more plugin... |
| CVE-2024-11853 | MEDIUM | 6.4 | 0.3% | Dec 3, 2024 | The jAlbum Bridge plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ar’ parameter in all versio... |
| CVE-2024-11805 | MEDIUM | 6.1 | 0.3% | Dec 3, 2024 | The Quick License Manager – WooCommerce Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via ... |
| CVE-2024-11732 | MEDIUM | 6.5 | 0.4% | Dec 3, 2024 | The BP Profile Shortcodes Extra plugin for WordPress is vulnerable to time-based SQL Injection via the ‘tab’ parameter i... |
| CVE-2024-11707 | MEDIUM | 6.1 | 0.4% | Dec 3, 2024 | The My auctions allegro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in... |
| CVE-2024-11461 | MEDIUM | 6.1 | 0.3% | Dec 3, 2024 | The Form Data Collector plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in... |
| CVE-2024-11453 | MEDIUM | 5.4 | 0.3% | Dec 3, 2024 | The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerab... |
| CVE-2024-9058 | MEDIUM | 5.4 | 0.2% | Dec 3, 2024 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for W... |
| CVE-2024-49421 | MEDIUM | 4.3 | 0.3% | Dec 3, 2024 | Path traversal in Quick Share Agent prior to version 3.5.14.47 in Android 12, 3.5.19.41 in Android 13, and 3.5.19.42 in ... |
| CVE-2024-49420 | HIGH | 7.5 | 0.5% | Dec 3, 2024 | Improper handling of responses in GamingHub prior to version 6.1.04.6 in Korea, 7.1.03.7 in Global allows remote attacke... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now