2024 CVE Vulnerabilities
39,258 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8216 | MEDIUM | 5.4 | 0.4% | Aug 27, 2024 | A vulnerability, which was classified as critical, has been found in nafisulbari/itsourcecode Insurance Management Syste... |
| CVE-2024-5814 | MEDIUM | 5.3 | 0.5% | Aug 27, 2024 | A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree... |
| CVE-2024-5288 | MEDIUM | 5.9 | 0.4% | Aug 27, 2024 | An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA k... |
| CVE-2024-45037 | MEDIUM | 6.4 | 0.3% | Aug 27, 2024 | The AWS Cloud Development Kit (CDK) is an open-source framework for defining cloud infrastructure using code. Customers ... |
| CVE-2024-1544 | MEDIUM | 4.9 | 0.3% | Aug 27, 2024 | Generating the ECDSA nonce k samples a random number r and then truncates this randomness with a modular reduction mod ... |
| CVE-2024-8209 | MEDIUM | 6.1 | 0.3% | Aug 27, 2024 | A vulnerability was found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic. Aff... |
| CVE-2024-8208 | MEDIUM | 6.1 | 0.3% | Aug 27, 2024 | A vulnerability has been found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic... |
| CVE-2024-43788 | MEDIUM | 6.1 | 0.9% | Aug 27, 2024 | Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capab... |
| CVE-2024-8200 | MEDIUM | 4.3 | 0.2% | Aug 27, 2024 | The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for Wor... |
| CVE-2024-8199 | MEDIUM | 4.3 | 0.4% | Aug 27, 2024 | The Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More plugin for Wor... |
| CVE-2024-40395 | MEDIUM | 6.5 | 0.6% | Aug 27, 2024 | An Insecure Direct Object Reference (IDOR) in PTC ThingWorx v9.5.0 allows attackers to view sensitive information, inclu... |
| CVE-2024-7941 | MEDIUM | 4.3 | 0.3% | Aug 27, 2024 | An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified U... |
| CVE-2024-8207 | MEDIUM | 6.7 | 0.2% | Aug 27, 2024 | In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating S... |
| CVE-2024-7791 | MEDIUM | 5.4 | 0.3% | Aug 27, 2024 | The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi... |
| CVE-2024-6789 | MEDIUM | 6.5 | 0.6% | Aug 27, 2024 | A path traversal issue in API endpoint in M-Files Server before version 24.8.13981.0 and LTS 24.2.13421.15 SR2 and LTS 2... |
| CVE-2024-8046 | MEDIUM | 6.4 | 0.3% | Aug 27, 2024 | The Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid plugin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2024-7608 | MEDIUM | 5.9 | 0.3% | Aug 27, 2024 | An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal. |
| CVE-2024-41175 | MEDIUM | 5.5 | 0.2% | Aug 27, 2024 | The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privilege... |
| CVE-2024-7304 | MEDIUM | 5.4 | 0.4% | Aug 27, 2024 | The Ninja Tables – Easiest Data Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG ... |
| CVE-2024-6804 | MEDIUM | 5.4 | 0.4% | Aug 27, 2024 | The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all vers... |
| CVE-2024-6688 | MEDIUM | 4.3 | 0.3% | Aug 27, 2024 | The Oxygen Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c... |
| CVE-2024-45036 | MEDIUM | 4.3 | 0.3% | Aug 26, 2024 | Tophat is a mobile applications testing harness. An Improper Access Control vulnerability can expose the `TOPHAT_APP_TOK... |
| CVE-2024-43915 | MEDIUM | 5.4 | 0.2% | Aug 26, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dylan James... |
| CVE-2024-43356 | MEDIUM | 4.3 | 0.2% | Aug 26, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide.This issue affects oik: from n/a through 4.12.0. |
| CVE-2024-43340 | MEDIUM | 4.3 | 0.2% | Aug 26, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now