2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11684 | MEDIUM | 6.1 | 0.4% | Nov 28, 2024 | The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site... |
| CVE-2024-11458 | MEDIUM | 6.1 | 0.4% | Nov 28, 2024 | The FAQ Builder AYS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'ays_faq_tab' parameter... |
| CVE-2024-11431 | MEDIUM | 6.4 | 0.4% | Nov 28, 2024 | The Ragic Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ragic' shortcode... |
| CVE-2024-11366 | MEDIUM | 6.1 | 0.4% | Nov 28, 2024 | The SEO Landing Page Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of ad... |
| CVE-2024-11333 | MEDIUM | 6.4 | 0.3% | Nov 28, 2024 | The HLS Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hls_player' shortcode... |
| CVE-2024-11203 | MEDIUM | 5.4 | 0.4% | Nov 28, 2024 | The EmbedPress – Embed PDF, 3D Flipbook, Social Feeds, Google Docs, Vimeo, Wistia, YouTube Videos, Audios, Google Maps i... |
| CVE-2024-36466 | HIGH | 8.8 | 0.7% | Nov 28, 2024 | A bug in the code allows an attacker to sign a forged zbx_session cookie, which then allows them to sign in with admin p... |
| CVE-2024-11925 | CRITICAL | 9.8 | 0.6% | Nov 28, 2024 | The JobSearch WP Job Board plugin for WordPress is vulnerable to privilege escalation in all versions up to, and includi... |
| CVE-2024-11918 | MEDIUM | 4.3 | 0.3% | Nov 28, 2024 | The Image Alt Text plugin for WordPress is vulnerable to unauthorized modification of data| due to a missing capability ... |
| CVE-2024-10896 | MEDIUM | 5.4 | 0.4% | Nov 28, 2024 | The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo and Slider settings, which ... |
| CVE-2024-10510 | MEDIUM | 4.8 | 0.4% | Nov 28, 2024 | The adBuddy+ (AdBlocker Detection) by NetfunkDesign WordPress plugin through 1.1.3 does not sanitise and escape some of ... |
| CVE-2024-10493 | MEDIUM | 5.4 | 0.3% | Nov 28, 2024 | The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress pl... |
| CVE-2024-10473 | MEDIUM | 5.4 | 0.4% | Nov 28, 2024 | The Logo Slider WordPress plugin before 4.5.0 does not sanitise and escape some of its Logo Settings when outputing the... |
| CVE-2024-46939 | LOW | 2.4 | 0.2% | Nov 28, 2024 | The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameter... |
| CVE-2024-53008 | MEDIUM | 5.3 | 1.0% | Nov 28, 2024 | Inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') issue exists in HAProxy. If this vulner... |
| CVE-2024-38658 | HIGH | 7.8 | 0.2% | Nov 28, 2024 | There is an Out-of-bounds read vulnerability in V-Server (v4.0.19.0 and earlier) and V-Server Lite (v4.0.19.0 and earlie... |
| CVE-2024-38389 | HIGH | 7.8 | 0.2% | Nov 28, 2024 | There is an Out-of-bounds read vulnerability in TELLUS (v4.0.19.0 and earlier) and TELLUS Lite (v4.0.19.0 and earlier). ... |
| CVE-2024-38309 | HIGH | 7.8 | 0.2% | Nov 28, 2024 | There are multiple stack-based buffer overflow vulnerabilities in V-SFT (v6.2.2.0 and earlier), TELLUS (v4.0.19.0 and ea... |
| CVE-2024-11933 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Monitouch V-SFT X1 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulne... |
| CVE-2024-11803 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vu... |
| CVE-2024-11802 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-Based Buffer Overflow Remote Code Execution Vulnerability.... |
| CVE-2024-11801 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vu... |
| CVE-2024-11800 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.... |
| CVE-2024-11799 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Tellus Lite V-Simulator 5 V8 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability.... |
| CVE-2024-11798 | HIGH | 7.8 | 0.3% | Nov 28, 2024 | Fuji Electric Monitouch V-SFT X1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerabilit... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now