2024 CVE Vulnerabilities
39,257 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-43961 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in azurecurve ... |
| CVE-2024-43960 | MEDIUM | 4.8 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Page Builde... |
| CVE-2024-43958 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gianni Port... |
| CVE-2024-43953 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webcodingplace Cla... |
| CVE-2024-43952 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat... |
| CVE-2024-43951 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreat... |
| CVE-2024-43950 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Nextbricks ... |
| CVE-2024-43949 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic ... |
| CVE-2024-43948 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Kark... |
| CVE-2024-43946 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes ... |
| CVE-2024-43936 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper... |
| CVE-2024-43935 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Deliciou... |
| CVE-2024-43934 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Robert Felt... |
| CVE-2024-43926 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Beaver ... |
| CVE-2024-45056 | MEDIUM | 5.9 | 0.4% | Aug 29, 2024 | zksolc is a Solidity compiler for ZKsync. All LLVM versions since 2015 fold `(xor (shl 1, x), -1)` to `(rotl ~1, x)` if ... |
| CVE-2024-45045 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | Collabora Online is a collaborative online office suite based on LibreOffice technology. In the mobile (Android/iOS) dev... |
| CVE-2024-44919 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | A cross-site scripting (XSS) vulnerability in the component admin_ads.php of SeaCMS v12.9 allows attackers to execute ar... |
| CVE-2024-43954 | MEDIUM | 6.3 | 0.3% | Aug 29, 2024 | Incorrect Authorization vulnerability in Themeum Droip allows Accessing Functionality Not Properly Constrained by ACLs.T... |
| CVE-2024-35118 | MEDIUM | 4.6 | 0.2% | Aug 29, 2024 | IBM MaaS360 for Android 6.31 through 8.60 is using hard coded credentials that can be obtained by a user with physical a... |
| CVE-2024-8304 | MEDIUM | 4.9 | 0.6% | Aug 29, 2024 | A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an un... |
| CVE-2024-8303 | MEDIUM | 6.3 | 0.4% | Aug 29, 2024 | A vulnerability classified as critical has been found in dingfanzu CMS up to 29d67d9044f6f93378e6eb6ff92272217ff7225c. T... |
| CVE-2024-43940 | MEDIUM | 6.5 | 0.4% | Aug 29, 2024 | Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing Functionality Not Properly Constr... |
| CVE-2024-43939 | MEDIUM | 6.5 | 0.3% | Aug 29, 2024 | Missing Authorization vulnerability in VIICTORY MEDIA LLC Z Y N I T H allows Accessing Functionality Not Properly Constr... |
| CVE-2024-1056 | MEDIUM | 5.4 | 0.2% | Aug 29, 2024 | The FunnelKit Funnel Builder Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allow_iframe... |
| CVE-2024-1384 | MEDIUM | 5.4 | 0.4% | Aug 29, 2024 | The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now