2024 CVE Vulnerabilities
39,258 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1384 | MEDIUM | 5.4 | 0.4% | Aug 29, 2024 | The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2024-7895 | MEDIUM | 5.4 | 0.4% | Aug 29, 2024 | The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘t... |
| CVE-2024-7606 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | The Front End Users plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'user-search' sho... |
| CVE-2024-7418 | MEDIUM | 4.3 | 0.5% | Aug 29, 2024 | The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to ... |
| CVE-2024-7132 | MEDIUM | 4.8 | 0.4% | Aug 29, 2024 | The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of i... |
| CVE-2024-6927 | MEDIUM | 4.8 | 0.4% | Aug 29, 2024 | The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2024-6551 | MEDIUM | 5.3 | 0.3% | Aug 29, 2024 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all ... |
| CVE-2024-5987 | MEDIUM | 4.3 | 0.3% | Aug 29, 2024 | The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable to unauthorized modification of data due to a missi... |
| CVE-2024-5857 | MEDIUM | 5.3 | 0.3% | Aug 29, 2024 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress... |
| CVE-2024-5624 | MEDIUM | 6.1 | 0.2% | Aug 29, 2024 | Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based a... |
| CVE-2024-5417 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting the... |
| CVE-2024-45440 | MEDIUM | 5.3 | 9.3% | Aug 29, 2024 | core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash... |
| CVE-2024-43986 | MEDIUM | 4.8 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople ... |
| CVE-2024-3944 | MEDIUM | 4.8 | 0.3% | Aug 29, 2024 | The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and in... |
| CVE-2024-38304 | MEDIUM | 6.5 | 0.1% | Aug 29, 2024 | Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of B... |
| CVE-2024-38303 | MEDIUM | 6 | 0.1% | Aug 29, 2024 | Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability.... |
| CVE-2024-7857 | MEDIUM | 6.5 | 0.5% | Aug 29, 2024 | The Media Library Folders plugin for WordPress is vulnerable to second order SQL Injection via the 'sort_type' parameter... |
| CVE-2024-41918 | MEDIUM | 6.1 | 0.3% | Aug 29, 2024 | 'Rakuten Ichiba App' for Android 12.4.0 and earlier and 'Rakuten Ichiba App' for iOS 11.7.0 and earlier are vulnerable t... |
| CVE-2024-8250 | MEDIUM | 5.5 | 0.3% | Aug 29, 2024 | NTLMSSP dissector crash in Wireshark 4.2.0 to 4.0.6 and 4.0.0 to 4.0.16 allows denial of service via packet injection or... |
| CVE-2024-45232 | MEDIUM | 5.3 | 0.3% | Aug 29, 2024 | An issue was discovered in powermail extension through 12.3.5 for TYPO3. It fails to validate the mail parameter of the ... |
| CVE-2024-45057 | MEDIUM | 6.1 | 0.3% | Aug 28, 2024 | i-Educar is free, fully online school management software that can be used by school secretaries, teachers, coordinators... |
| CVE-2024-45048 | MEDIUM | 6.5 | 0.6% | Aug 28, 2024 | PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Affected versions are subject to a bypas... |
| CVE-2024-45046 | MEDIUM | 5.4 | 0.4% | Aug 28, 2024 | PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. In affected versions `\PhpOffice\PhpSpre... |
| CVE-2024-45054 | MEDIUM | 6.7 | 0.3% | Aug 28, 2024 | Hwameistor is an HA local storage system for cloud-native stateful workloads. This ClusterRole has * verbs of * resource... |
| CVE-2024-45043 | MEDIUM | 5.3 | 0.5% | Aug 28, 2024 | The OpenTelemetry Collector module AWS firehose receiver is for ingesting AWS Kinesis Data Firehose delivery stream mess... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now