2024 CVE Vulnerabilities
39,227 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52283 | MEDIUM | 5.7 | 0.3% | Nov 28, 2024 | Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a ... |
| CVE-2024-49503 | MEDIUM | 4.6 | 0.3% | Nov 28, 2024 | A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE mana... |
| CVE-2024-49502 | MEDIUM | 4.6 | 0.3% | Nov 28, 2024 | A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup... |
| CVE-2024-22038 | HIGH | 7.3 | 0.2% | Nov 28, 2024 | Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information o... |
| CVE-2024-22037 | MEDIUM | 5.7 | 0.2% | Nov 28, 2024 | The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permissio... |
| CVE-2024-11599 | MEDIUM | 5.3 | 0.5% | Nov 28, 2024 | Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate emai... |
| CVE-2024-11103 | CRITICAL | 9.8 | 0.7% | Nov 28, 2024 | The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up t... |
| CVE-2024-11082 | CRITICAL | 9.9 | 1.2% | Nov 28, 2024 | The Tumult Hype Animations plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat... |
| CVE-2024-10798 | MEDIUM | 4.3 | 0.4% | Nov 28, 2024 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up t... |
| CVE-2024-10780 | MEDIUM | 4.3 | 0.4% | Nov 28, 2024 | The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up ... |
| CVE-2024-10670 | MEDIUM | 4.3 | 0.4% | Nov 28, 2024 | The Primary Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and in... |
| CVE-2024-9669 | HIGH | 7.2 | 0.9% | Nov 28, 2024 | The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up... |
| CVE-2024-8066 | HIGH | 8.8 | 1.1% | Nov 28, 2024 | The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation i... |
| CVE-2024-11788 | MEDIUM | 6.4 | 0.4% | Nov 28, 2024 | The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's... |
| CVE-2024-11786 | MEDIUM | 6.4 | 0.4% | Nov 28, 2024 | The Login with Vipps and MobilePay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'c... |
| CVE-2024-11761 | MEDIUM | 6.4 | 0.3% | Nov 28, 2024 | The LegalWeb Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'legalweb-popup' s... |
| CVE-2024-11685 | MEDIUM | 6.1 | 0.3% | Nov 28, 2024 | The `Kudos Donations – Easy donations and payments with Mollie` plugin for WordPress is vulnerable to Reflected Cross-Si... |
| CVE-2024-11684 | MEDIUM | 6.1 | 0.4% | Nov 28, 2024 | The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site... |
| CVE-2024-11458 | MEDIUM | 6.1 | 0.4% | Nov 28, 2024 | The FAQ Builder AYS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ays_faq_tab' parameter... |
| CVE-2024-11431 | MEDIUM | 6.4 | 0.4% | Nov 28, 2024 | The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode... |
| CVE-2024-11366 | MEDIUM | 6.1 | 0.4% | Nov 28, 2024 | The SEO Landing Page Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad... |
| CVE-2024-11333 | MEDIUM | 6.4 | 0.3% | Nov 28, 2024 | The HLS Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hls_player' shortcode... |
| CVE-2024-11203 | MEDIUM | 5.4 | 0.4% | Nov 28, 2024 | The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps i... |
| CVE-2024-36466 | HIGH | 8.8 | 0.7% | Nov 28, 2024 | A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin p... |
| CVE-2024-11925 | CRITICAL | 9.8 | 0.6% | Nov 28, 2024 | The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now