2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52495 | HIGH | 8.5 | 0.4% | Nov 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology ... |
| CVE-2024-52490 | CRITICAL | 10 | 0.6% | Nov 28, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in pathomation Pathomation pathomation allows Upload a Web... |
| CVE-2024-52481 | HIGH | 7.5 | 0.7% | Nov 28, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Astoundify Jobify jobify... |
| CVE-2024-52475 | CRITICAL | 9.8 | 1.8% | Nov 28, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Information Technology Wawp automation-web-pla... |
| CVE-2024-52474 | CRITICAL | 9.3 | 0.5% | Nov 28, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Сервис “Экспресс П... |
| CVE-2024-11620 | HIGH | 7.2 | 0.7% | Nov 28, 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math ... |
| CVE-2024-11402 | HIGH | 7.1 | 0.3% | Nov 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kubiq Block Editor... |
| CVE-2024-8672 | CRITICAL | 9.9 | 43.8% | Nov 28, 2024 | The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Ex... |
| CVE-2024-52283 | MEDIUM | 5.7 | 0.3% | Nov 28, 2024 | Missing sanitation of inputs allowed arbitrary users to conduct a stored XSS attack that triggers for users that view a ... |
| CVE-2024-49503 | MEDIUM | 4.6 | 0.3% | Nov 28, 2024 | A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SUSE mana... |
| CVE-2024-49502 | MEDIUM | 4.6 | 0.3% | Nov 28, 2024 | A Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in the Setup... |
| CVE-2024-22038 | HIGH | 7.3 | 0.2% | Nov 28, 2024 | Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information o... |
| CVE-2024-22037 | MEDIUM | 5.7 | 0.2% | Nov 28, 2024 | The uyuni-server-attestation systemd service needs a database_password environment variable. This file has 640 permissio... |
| CVE-2024-11599 | MEDIUM | 5.3 | 0.5% | Nov 28, 2024 | Mattermost versions 10.0.x <= 10.0.1, 10.1.x <= 10.1.1, 9.11.x <= 9.11.3, 9.5.x <= 9.5.11 fail to properly validate emai... |
| CVE-2024-11103 | CRITICAL | 9.8 | 0.7% | Nov 28, 2024 | The Contest Gallery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up t... |
| CVE-2024-11082 | CRITICAL | 9.9 | 1.2% | Nov 28, 2024 | The Tumult Hype Animations plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat... |
| CVE-2024-10798 | MEDIUM | 4.3 | 0.4% | Nov 28, 2024 | The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Information Exposure in all versions up t... |
| CVE-2024-10780 | MEDIUM | 4.3 | 0.4% | Nov 28, 2024 | The Restaurant & Cafe Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up ... |
| CVE-2024-10670 | MEDIUM | 4.3 | 0.4% | Nov 28, 2024 | The Primary Addon for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and in... |
| CVE-2024-9669 | HIGH | 7.2 | 0.9% | Nov 28, 2024 | The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up... |
| CVE-2024-8066 | HIGH | 8.8 | 1.1% | Nov 28, 2024 | The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation i... |
| CVE-2024-11788 | MEDIUM | 6.4 | 0.4% | Nov 28, 2024 | The StreamWeasels YouTube Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's... |
| CVE-2024-11786 | MEDIUM | 6.4 | 0.4% | Nov 28, 2024 | The Login with Vipps and MobilePay plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'c... |
| CVE-2024-11761 | MEDIUM | 6.4 | 0.3% | Nov 28, 2024 | The LegalWeb Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'legalweb-popup' s... |
| CVE-2024-11685 | MEDIUM | 6.1 | 0.3% | Nov 28, 2024 | The `Kudos Donations – Easy donations and payments with Mollie` plugin for WordPress is vulnerable to Reflected Cross-Si... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now