2024 CVE Vulnerabilities

39,260 CVEs published in 2024.

CVE IDSeverityCVSSDescription
CVE-2024-11968HIGH7.5A vulnerability was found in code-projects Farmacia up to 1.0. It has been declared as critical. Affected by this vulner...
CVE-2024-11967CRITICAL9.8A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is...
CVE-2024-11966CRITICAL9.8A vulnerability was found in PHPGurukul Complaint Management system 1.0 and classified as critical. This issue affects s...
CVE-2024-52338CRITICAL9.8Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0...
CVE-2024-11965CRITICAL9.8A vulnerability has been found in PHPGurukul Complaint Management system 1.0 and classified as critical. This vulnerabil...
CVE-2024-11964CRITICAL9.8A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0. This affects...
CVE-2024-11969HIGH8.8The NetCloud Exchange client for Windows, version 1.110.50, contains an insecure file and folder permissions vulnerabili...
CVE-2024-11963HIGH8.8A vulnerability, which was classified as critical, has been found in code-projects Responsive Hotel Site 1.0. Affected b...
CVE-2024-11962CRITICAL9.8A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnera...
CVE-2024-11961HIGH7.5A vulnerability was found in Guangzhou Huayi Intelligent Technology Jeewms 3.7. It has been rated as problematic. This i...
CVE-2024-11960HIGH8.8A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the f...
CVE-2024-11959HIGH8.8A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function form...
CVE-2024-7747MEDIUM6.5The Wallet for WooCommerce plugin for WordPress is vulnerable to incorrect conversion between numeric types in all versi...
CVE-2024-53731MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fintelligence Fint...
CVE-2024-8308MEDIUM6.5A low privileged remote attacker can insert a SQL injection in the web application due to improper handling of HTTP requ...
CVE-2024-53737MEDIUM5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandtoss WP Mails...
CVE-2024-53736HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in Jason Grim Custom Shortcode Sidebars custom-shortcode-sidebars allows...
CVE-2024-53734HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in Jamie O Idealien Category Enhancements idealien-category-enhancements...
CVE-2024-53733HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in harshtohit111 Fenc...
CVE-2024-53732HIGH7.1Cross-Site Request Forgery (CSRF) vulnerability in wpwox Footer Flyout Widget footer-flyout-widget allows Stored XSS.Thi...
CVE-2024-52501HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2024-52499HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2024-52498HIGH7.5Path Traversal: '.../...//' vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows PHP Local File I...
CVE-2024-52497HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...
CVE-2024-52496HIGH7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now