2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-12685 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-12681 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-12154 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-11505 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-11389 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-11105 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-10243 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-10212 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-0398 | — | — | — | Jul 5, 2025 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-58254 | — | — | — | Jul 5, 2025 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-11738. Reason: This candidate is a duplicate of ... |
| CVE-2024-9453 | MEDIUM | 6.5 | 0.3% | Jul 4, 2025 | A vulnerability was found in Red Hat OpenShift Jenkins. The bearer token is not obfuscated in the logs and potentially c... |
| CVE-2024-11937 | MEDIUM | 5.4 | 0.2% | Jul 4, 2025 | The Premium Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's link... |
| CVE-2024-5647 | MEDIUM | 6.4 | 0.3% | Jul 3, 2025 | Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups li... |
| CVE-2024-9017 | MEDIUM | 6.4 | 0.2% | Jul 3, 2025 | The PeepSo Core: Groups plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Group Description fiel... |
| CVE-2024-35164 | HIGH | 7.5 | 0.4% | Jul 2, 2025 | The terminal emulator of Apache Guacamole 1.5.5 and older does not properly validate console codes received from servers... |
| CVE-2024-13786 | CRITICAL | 9.8 | 0.5% | Jul 2, 2025 | The education theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.6.10 via... |
| CVE-2024-13451 | HIGH | 7.5 | 0.3% | Jul 2, 2025 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil... |
| CVE-2024-11405 | MEDIUM | 6.1 | 0.2% | Jul 2, 2025 | The WP Front-end login and register plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the email a... |
| CVE-2024-49365 | HIGH | 8.1 | 0.2% | Jul 1, 2025 | tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a malicious JSON-stringifyable message can... |
| CVE-2024-49364 | HIGH | 8.1 | 0.3% | Jul 1, 2025 | tiny-secp256k1 is a tiny secp256k1 native/JS wrapper. Prior to version 1.1.7, a private key can be extracted on signing ... |
| CVE-2024-46993 | MEDIUM | 4.4 | 0.1% | Jul 1, 2025 | Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In ... |
| CVE-2024-46992 | HIGH | 7.8 | 0.1% | Jul 1, 2025 | Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Fro... |
| CVE-2024-12915 | MEDIUM | 4.6 | 0.2% | Jun 30, 2025 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Devinim Sof... |
| CVE-2024-53621 | HIGH | 7.5 | 0.4% | Jun 30, 2025 | A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allow... |
| CVE-2024-8419 | HIGH | 7.5 | 0.4% | Jun 30, 2025 | The endpoint hosts a script that allows an unauthorized remote attacker to put the system in a fail-safe state over the ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now