2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31098 | HIGH | 8.8 | 0.4% | Jun 9, 2024 | Missing Authorization vulnerability in Mr.Ebabi New Order Notification for Woocommerce.This issue affects New Order Noti... |
| CVE-2024-30537 | HIGH | 8.8 | 0.3% | Jun 9, 2024 | Missing Authorization vulnerability in WPClever WPC Badge Management for WooCommerce.This issue affects WPC Badge Manage... |
| CVE-2024-5775 | HIGH | 8.8 | 0.6% | Jun 9, 2024 | A vulnerability was found in SourceCodester Vehicle Management System 1.0 and classified as critical. Affected by this i... |
| CVE-2024-4680 | HIGH | 8.8 | 0.4% | Jun 8, 2024 | A vulnerability in zenml-io/zenml version 0.56.3 allows attackers to reuse old session credentials or session IDs due to... |
| CVE-2024-35678 | HIGH | 8.8 | 0.4% | Jun 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contac... |
| CVE-2024-35659 | HIGH | 8.8 | 0.3% | Jun 8, 2024 | Missing Authorization vulnerability in Iqonic Design KiviCare kivicare-clinic-management-system allows Exploiting Incorr... |
| CVE-2024-35689 | HIGH | 8.8 | 0.2% | Jun 8, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify.This issue affects Analytify: from n/a through 5.2.3. |
| CVE-2024-37408 | HIGH | 7.3 | 0.3% | Jun 8, 2024 | fprintd through 1.94.3 lacks a security attention mechanism, and thus unexpected actions might be authorized by "auth su... |
| CVE-2024-35750 | HIGH | 8.8 | 0.4% | Jun 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevart Responsiv... |
| CVE-2024-35736 | HIGH | 8.8 | 0.4% | Jun 8, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualiz... |
| CVE-2024-3668 | HIGH | 8.8 | 0.4% | Jun 8, 2024 | The PowerPack Pro for Elementor plugin for WordPress is vulnerable to privilege escalation in all versions up to, and in... |
| CVE-2024-0444 | HIGH | 8.8 | 1.6% | Jun 7, 2024 | GStreamer AV1 Video Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows r... |
| CVE-2024-1694 | HIGH | 7.8 | 0.1% | Jun 7, 2024 | Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass d... |
| CVE-2024-36827 | HIGH | 7.5 | 0.5% | Jun 7, 2024 | An XML External Entity (XXE) vulnerability in the ebookmeta.get_metadata function of ebookmeta before v1.2.8 allows atta... |
| CVE-2024-37163 | HIGH | 7.5 | 0.2% | Jun 7, 2024 | SkyScrape is a GUI Dashboard for AWS Infrastructure and Managing Resources and Usage Costs. SkyScrape's API requests ar... |
| CVE-2024-32502 | HIGH | 8.4 | 0.2% | Jun 7, 2024 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos ... |
| CVE-2024-31959 | HIGH | 7.8 | 0.2% | Jun 7, 2024 | An issue was discovered in Samsung Mobile Processor Exynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the vali... |
| CVE-2024-31958 | HIGH | 7.8 | 0.1% | Jun 7, 2024 | An issue was discovered in Samsung Mobile Processor EExynos 2200, Exynos 1480, Exynos 2400. It lacks a check for the val... |
| CVE-2024-30162 | HIGH | 7.2 | 0.7% | Jun 7, 2024 | Invision Community through 4.7.16 allows remote code execution via the applications/core/modules/admin/editor/toolbar.ph... |
| CVE-2024-32503 | HIGH | 7.8 | 0.2% | Jun 7, 2024 | An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 850, Exynos 1080, Exynos 2100, Exynos ... |
| CVE-2024-36792 | HIGH | 8.2 | 0.3% | Jun 7, 2024 | An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain acce... |
| CVE-2024-36790 | HIGH | 8.8 | 0.3% | Jun 7, 2024 | Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext. |
| CVE-2024-36789 | HIGH | 8.1 | 0.4% | Jun 7, 2024 | An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to de... |
| CVE-2024-36787 | HIGH | 8.8 | 0.6% | Jun 7, 2024 | An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the admin... |
| CVE-2024-5599 | HIGH | 7.5 | 0.5% | Jun 7, 2024 | The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to Sensitive Information Expos... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now