2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-3998 | MEDIUM | 5.4 | 0.2% | Aug 30, 2024 | The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in a... |
| CVE-2024-5061 | MEDIUM | 5.4 | 0.3% | Aug 30, 2024 | The Enfold - Responsive Multi-Purpose Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wr... |
| CVE-2024-5024 | MEDIUM | 6.1 | 0.3% | Aug 30, 2024 | The Memberpress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mepr_screenname' and 'mepr... |
| CVE-2024-4401 | MEDIUM | 5.4 | 0.3% | Aug 30, 2024 | The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ and 'eae_sli... |
| CVE-2024-8328 | MEDIUM | 5.4 | 0.3% | Aug 30, 2024 | Easy test Online Learning and Testing Platform from HWA JIUH DIGITAL TECHNOLOGY does not properly validate a specific pa... |
| CVE-2024-1543 | MEDIUM | 5.5 | 0.2% | Aug 29, 2024 | The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-channel attacke... |
| CVE-2024-41349 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php. |
| CVE-2024-41371 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php. |
| CVE-2024-41358 | MEDIUM | 6.1 | 1.5% | Aug 29, 2024 | phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php. |
| CVE-2024-41351 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/getContent.php |
| CVE-2024-41350 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | bjyadmin commit a560fd5 is vulnerable to Cross Site Scripting (XSS) via Public/statics/umeditor1_2_3/php/imageUp.php |
| CVE-2024-41348 | MEDIUM | 6.1 | 0.4% | Aug 29, 2024 | openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php |
| CVE-2024-41347 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php |
| CVE-2024-41346 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php |
| CVE-2024-41345 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/trip.php |
| CVE-2024-34018 | MEDIUM | 5.5 | 0.1% | Aug 29, 2024 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap D... |
| CVE-2024-43947 | MEDIUM | 4.3 | 0.2% | Aug 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended... |
| CVE-2024-43921 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Magic Post ... |
| CVE-2024-43920 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jegstudio G... |
| CVE-2024-44930 | MEDIUM | 6.5 | 0.3% | Aug 29, 2024 | Serilog before v2.1.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify th... |
| CVE-2024-44776 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malici... |
| CVE-2024-44717 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML v... |
| CVE-2024-44716 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | A cross-site scripting (XSS) vulnerability in DedeBIZ v6.3.0 allows attackers to execute arbitrary web scripts or HTML v... |
| CVE-2024-43964 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Lei... |
| CVE-2024-43963 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WaspThemes ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now