2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-0111 | MEDIUM | 4.4 | 0.2% | Aug 31, 2024 | NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect ... |
| CVE-2024-8276 | MEDIUM | 5.4 | 0.4% | Aug 31, 2024 | The WPZOOM Portfolio Lite – Filterable Portfolio Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin... |
| CVE-2024-39579 | MEDIUM | 6.7 | 0.2% | Aug 31, 2024 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local... |
| CVE-2024-39578 | MEDIUM | 6.3 | 0.2% | Aug 31, 2024 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. ... |
| CVE-2024-5212 | MEDIUM | 6.1 | 0.4% | Aug 31, 2024 | The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ paramet... |
| CVE-2024-3886 | MEDIUM | 6.1 | 0.4% | Aug 31, 2024 | The tagDiv Composer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘envato_code[]’ paramet... |
| CVE-2024-8006 | MEDIUM | 4.4 | 0.2% | Aug 31, 2024 | Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture ... |
| CVE-2024-45304 | MEDIUM | 6.5 | 0.5% | Aug 31, 2024 | Cairo-Contracts are OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup. This vulnerability ... |
| CVE-2024-6585 | MEDIUM | 5.4 | 0.5% | Aug 30, 2024 | Multiple stored cross-site scripting (“XSS”) vulnerabilities in the markdown dashboard and dashboard comment functionali... |
| CVE-2024-8285 | MEDIUM | 5.9 | 0.4% | Aug 30, 2024 | A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured co... |
| CVE-2024-44684 | MEDIUM | 6.1 | 0.2% | Aug 30, 2024 | TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the "Title," "Images," and "C... |
| CVE-2024-44683 | MEDIUM | 6.1 | 0.2% | Aug 30, 2024 | Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php. |
| CVE-2024-44682 | MEDIUM | 6.1 | 0.3% | Aug 30, 2024 | ShopXO 6.2 is vulnerable to Cross Site Scripting (XSS) in the backend that allows attackers to execute code by changing ... |
| CVE-2024-21658 | MEDIUM | 4.3 | 0.4% | Aug 30, 2024 | discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topi... |
| CVE-2024-8235 | MEDIUM | 6.2 | 0.2% | Aug 30, 2024 | A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corne... |
| CVE-2024-45047 | MEDIUM | 6.1 | 0.3% | Aug 30, 2024 | svelte performance oriented web framework. A potential mXSS vulnerability exists in Svelte for versions up to but not in... |
| CVE-2024-8337 | MEDIUM | 5.4 | 0.4% | Aug 30, 2024 | A vulnerability, which was classified as problematic, has been found in SourceCodester Contact Manager with Export to VC... |
| CVE-2024-8274 | MEDIUM | 6.1 | 0.5% | Aug 30, 2024 | The WP Booking Calendar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters from... |
| CVE-2024-7858 | MEDIUM | 6.3 | 0.3% | Aug 30, 2024 | The Media Library Folders plugin for WordPress is vulnerable to unauthorized access due to missing capability checks on ... |
| CVE-2024-7122 | MEDIUM | 5.4 | 0.4% | Aug 30, 2024 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in a... |
| CVE-2024-8319 | MEDIUM | 4.3 | 0.2% | Aug 30, 2024 | The Tourfic plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.11.... |
| CVE-2024-44944 | MEDIUM | 5.5 | 0.2% | Aug 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calcul... |
| CVE-2024-42412 | MEDIUM | 6.1 | 0.2% | Aug 30, 2024 | Cross-site scripting vulnerability exists in ELECOM wireless access points due to improper processing of input values in... |
| CVE-2024-34577 | MEDIUM | 6.1 | 0.2% | Aug 30, 2024 | Cross-site scripting vulnerability exists in WRC-X3000GS2-B, WRC-X3000GS2-W, WRC-X3000GS2A-B and WRC-X3000GST2-B due to ... |
| CVE-2024-5879 | MEDIUM | 5.4 | 0.4% | Aug 30, 2024 | The HubSpot – CRM, Email Marketing, Live Chat, Forms & Analytics plugin for WordPress is vulnerable to Stored Cross-Site... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now