2024 CVE Vulnerabilities

39,260 CVEs published in 2024.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2024-43340MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Nasirahmed Advanced Form Integration.This issue affects Advanced Form...
CVE-2024-43339MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress allows Cross-Site Scripting (XSS).This issue affects Web...
CVE-2024-43337MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: fro...
CVE-2024-43336MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in WP User Manager WP User Manager wp-user-manager.This issue affects WP...
CVE-2024-43316MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Checkout Plugins Stripe Payments For WooCommerce by Checkout.This iss...
CVE-2024-43301MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in Fonts Plugin Fonts allows Stored XSS.This issue affects Fonts: from n...
CVE-2024-43299MEDIUM5.4Cross-Site Request Forgery (CSRF) vulnerability in Softaculous SpeedyCache speedycache.This issue affects SpeedyCache: f...
CVE-2024-43295MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in Passionate Programmers B.V. WP Data Access.This issue affects WP Data...
CVE-2024-43269MEDIUM4.3Cross-Site Request Forgery (CSRF) vulnerability in WPBackItUp Backup and Restore WordPress.This issue affects Backup and...
CVE-2024-43257MEDIUM6.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Nouthemes Leopard - WordPress offload media....
CVE-2024-43255MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zookatron MyBookTa...
CVE-2024-43251MEDIUM6.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Bit Apps Bit Form Pro.This issue affects Bit...
CVE-2024-43214MEDIUM5.3Missing Authorization vulnerability in Saad Iqbal myCred mycred.This issue affects myCred: from n/a through <= 2.7.2.
CVE-2024-8105MEDIUM6.4A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in po...
CVE-2024-44797MEDIUM6.1A cross-site scripting (XSS) vulnerability in the component /managers/enable_requests.php of Gazelle commit 63b3370 allo...
CVE-2024-44796MEDIUM6.1A cross-site scripting (XSS) vulnerability in the component /auth/AzureRedirect.php of PicUploader commit fcf82ea allows...
CVE-2024-44795MEDIUM6.1A cross-site scripting (XSS) vulnerability in the component /login/disabled.php of Gazelle commit 63b3370 allows attacke...
CVE-2024-44794MEDIUM6.1A cross-site scripting (XSS) vulnerability in the component /master/auth/OnedriveRedirect.php of PicUploader commit fcf8...
CVE-2024-44793MEDIUM6.1A cross-site scripting (XSS) vulnerability in the component /managers/multiple_freeleech.php of Gazelle commit 63b3370 a...
CVE-2024-42906MEDIUM6.1TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a fil...
CVE-2024-43806MEDIUM6.5Rustix is a set of safe Rust bindings to POSIX-ish APIs. When using `rustix::fs::Dir` using the `linux_raw` backend, it'...
CVE-2024-43802MEDIUM4.5Vim is an improved version of the unix vi text editor. When flushing the typeahead buffer, Vim moves the current positio...
CVE-2024-8174MEDIUM6.1A vulnerability has been found in code-projects Blood Bank System 1.0 and classified as problematic. Affected by this vu...
CVE-2024-42790MEDIUM5.4A Reflected Cross Site Scripting (XSS) vulnerability was found in "/music/index.php?page=test" in Kashipara Music Manage...
CVE-2024-8172MEDIUM6.1A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Attendance System 1.0. Th...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now