2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6000 | HIGH | 7.1 | 0.5% | Jun 15, 2024 | The FooEvents for WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improp... |
| CVE-2024-3813 | HIGH | 8.8 | 0.7% | Jun 15, 2024 | The tagDiv Composer plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.8... |
| CVE-2024-6003 | HIGH | 7.3 | 0.5% | Jun 14, 2024 | A vulnerability was found in Guangdong Baolun Electronics IP Network Broadcasting Service Platform 2.0. It has been clas... |
| CVE-2024-36600 | HIGH | 8.4 | 0.4% | Jun 14, 2024 | Buffer Overflow Vulnerability in libcdio 2.2.0 (fixed in 2.3.0) allows an attacker to execute arbitrary code via a craft... |
| CVE-2024-36598 | HIGH | 8.1 | 0.6% | Jun 14, 2024 | An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a cra... |
| CVE-2024-36597 | HIGH | 8.8 | 2.4% | Jun 14, 2024 | Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php. |
| CVE-2024-24320 | HIGH | 8.8 | 4.0% | Jun 14, 2024 | Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sen... |
| CVE-2024-37369 | HIGH | 8.8 | 0.3% | Jun 14, 2024 | A privilege escalation vulnerability exists in the affected product. The vulnerability allows low-privilege users to edi... |
| CVE-2024-37885 | HIGH | 7.8 | 0.3% | Jun 14, 2024 | The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection i... |
| CVE-2024-37882 | HIGH | 8.1 | 0.5% | Jun 14, 2024 | Nextcloud Server is a self hosted personal cloud system. A recipient of a share with read&share permissions could reshar... |
| CVE-2024-37645 | HIGH | 8.8 | 0.7% | Jun 14, 2024 | TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter... |
| CVE-2024-37643 | HIGH | 8.8 | 0.7% | Jun 14, 2024 | TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow vulnerability via the submit-url parameter... |
| CVE-2024-37641 | HIGH | 8.8 | 0.6% | Jun 14, 2024 | TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a stack overflow via the submit-url parameter at /formNewSc... |
| CVE-2024-37644 | HIGH | 8.8 | 0.5% | Jun 14, 2024 | TRENDnet TEW-814DAP v1_(FW1.01B01) was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, w... |
| CVE-2024-37368 | HIGH | 7.5 | 0.5% | Jun 14, 2024 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE. The vulnerability allows a u... |
| CVE-2024-37367 | HIGH | 7.5 | 0.5% | Jun 14, 2024 | A user authentication vulnerability exists in the Rockwell Automation FactoryTalk® View SE v12. The vulnerability allows... |
| CVE-2024-37313 | HIGH | 7.5 | 0.4% | Jun 14, 2024 | Nextcloud server is a self hosted personal cloud system. Under some circumstance it was possible to bypass the second fa... |
| CVE-2024-34694 | HIGH | 8.1 | 0.6% | Jun 14, 2024 | LNbits is a Lightning wallet and accounts system. Paying invoices in Eclair that do not get settled within the internal ... |
| CVE-2024-33377 | HIGH | 8.1 | 0.4% | Jun 14, 2024 | LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attacker... |
| CVE-2024-37640 | HIGH | 8.8 | 0.6% | Jun 14, 2024 | TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via ssid5g in the function setWiFiEasyG... |
| CVE-2024-37639 | HIGH | 8.8 | 0.6% | Jun 14, 2024 | TOTOLINK A3700R V9.1.2u.6165_20211012 was discovered to contain a stack overflow via eport in the function setIpPortFilt... |
| CVE-2024-2024 | HIGH | 8.8 | 3.3% | Jun 14, 2024 | The Folders Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ... |
| CVE-2024-36459 | HIGH | 8.4 | 0.4% | Jun 14, 2024 | A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for ... |
| CVE-2024-5685 | HIGH | 8.1 | 0.4% | Jun 14, 2024 | Users with "User:edit" and "Self:api" permissions can promote or demote themselves or other users by performing changes ... |
| CVE-2024-5995 | HIGH | 8.8 | 0.4% | Jun 14, 2024 | The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the sessi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now