2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-33016 | MEDIUM | 6.8 | 0.2% | Sep 2, 2024 | memory corruption when an invalid firehose patch command is invoked. |
| CVE-2024-7692 | MEDIUM | 6.1 | 0.3% | Sep 2, 2024 | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in t... |
| CVE-2024-7691 | MEDIUM | 6.1 | 0.4% | Sep 2, 2024 | The Flaming Forms WordPress plugin through 1.0.1 does not sanitise and escape some parameters, which could allow unauthe... |
| CVE-2024-7690 | MEDIUM | 4.3 | 0.2% | Sep 2, 2024 | The DN Popup WordPress plugin through 1.2.2 does not have CSRF check in place when updating its settings, which could al... |
| CVE-2024-7354 | MEDIUM | 6.1 | 0.7% | Sep 2, 2024 | The Ninja Forms WordPress plugin before 3.8.11 does not escape an URL before outputting it back in an attribute, leadin... |
| CVE-2024-8365 | MEDIUM | 6.5 | 0.5% | Sep 2, 2024 | Vault Community Edition and Vault Enterprise experienced a regression where functionality that HMAC’d sensitive headers ... |
| CVE-2024-45528 | MEDIUM | 5.4 | 0.3% | Sep 2, 2024 | CodeAstro MembershipM-PHP (aka Membership Management System in PHP) 1.0 allows add_members.php fullname stored XSS. |
| CVE-2024-45527 | MEDIUM | 6.1 | 0.2% | Sep 2, 2024 | REDCap 14.7.0 allows HTML injection via the project title of a New Project action. This can lead to resultant logout CSR... |
| CVE-2024-39612 | MEDIUM | 5.5 | 0.2% | Sep 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
| CVE-2024-38382 | MEDIUM | 5.5 | 0.2% | Sep 2, 2024 | in OpenHarmony v4.0.0 and prior versions allow a local attacker cause information leak through out-of-bounds Read. |
| CVE-2024-28044 | MEDIUM | 5.5 | 0.1% | Sep 2, 2024 | in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow. |
| CVE-2024-20088 | MEDIUM | 4.4 | 0.1% | Sep 2, 2024 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio... |
| CVE-2024-20087 | MEDIUM | 6.7 | 0.1% | Sep 2, 2024 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p... |
| CVE-2024-20086 | MEDIUM | 6.7 | 0.1% | Sep 2, 2024 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p... |
| CVE-2024-20085 | MEDIUM | 4.4 | 0.1% | Sep 2, 2024 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis... |
| CVE-2024-20084 | MEDIUM | 4.4 | 0.1% | Sep 2, 2024 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis... |
| CVE-2024-45270 | MEDIUM | 4.3 | 0.2% | Sep 2, 2024 | WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Hero ... |
| CVE-2024-45269 | MEDIUM | 4.3 | 0.3% | Sep 2, 2024 | WordPress plugin "Carousel Slider" provided by Sayful Islam contains a cross-site request forgery vulnerability on Carou... |
| CVE-2024-8370 | MEDIUM | 5.4 | 0.4% | Sep 1, 2024 | A vulnerability classified as problematic was found in Grocy up to 4.2.0. This vulnerability affects unknown code of the... |
| CVE-2024-45509 | MEDIUM | 6.5 | 0.4% | Sep 1, 2024 | In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in t... |
| CVE-2024-5053 | MEDIUM | 4.3 | 0.4% | Sep 1, 2024 | The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulner... |
| CVE-2024-8367 | MEDIUM | 5.1 | 0.5% | Sep 1, 2024 | A vulnerability was found in HM Courts & Tribunals Service Probate Back Office up to c1afe0cdb2b2766d9e24872c4e827f8b82a... |
| CVE-2024-8366 | MEDIUM | 4.7 | 0.5% | Aug 31, 2024 | A vulnerability was found in code-projects Pharmacy Management System 1.0. It has been classified as problematic. This a... |
| CVE-2024-44946 | MEDIUM | 5.5 | 0.8% | Aug 31, 2024 | In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. ... |
| CVE-2024-8108 | MEDIUM | 5.4 | 0.4% | Aug 31, 2024 | The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alignment' parameter in ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now