2024 CVE Vulnerabilities
39,260 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7775 | MEDIUM | 4.8 | 0.2% | Aug 20, 2024 | The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form buil... |
| CVE-2024-6575 | MEDIUM | 5.4 | 0.3% | Aug 20, 2024 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre... |
| CVE-2024-5763 | MEDIUM | 5.4 | 0.4% | Aug 20, 2024 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre... |
| CVE-2024-7948 | MEDIUM | 5.4 | 0.4% | Aug 20, 2024 | A vulnerability classified as problematic was found in SourceCodester Accounts Manager App 1.0. This vulnerability affec... |
| CVE-2024-7945 | MEDIUM | 5.4 | 0.5% | Aug 20, 2024 | A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been declared as problematic. A... |
| CVE-2024-7850 | MEDIUM | 6.1 | 0.2% | Aug 20, 2024 | The BP Profile Search plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ... |
| CVE-2024-5941 | MEDIUM | 5.4 | 0.4% | Aug 20, 2024 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access and dele... |
| CVE-2024-5940 | MEDIUM | 5.3 | 0.5% | Aug 20, 2024 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of... |
| CVE-2024-5939 | MEDIUM | 5.3 | 0.5% | Aug 20, 2024 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data ... |
| CVE-2024-7942 | MEDIUM | 5.4 | 0.4% | Aug 20, 2024 | A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerabilit... |
| CVE-2024-7929 | MEDIUM | 6.1 | 0.5% | Aug 19, 2024 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Forum Website 1.0. This affects... |
| CVE-2024-4785 | MEDIUM | 6.5 | 0.5% | Aug 19, 2024 | BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero |
| CVE-2024-35539 | MEDIUM | 6.5 | 1.4% | Aug 19, 2024 | Typecho v1.3.0 was discovered to contain a race condition vulnerability in the post commenting function. This vulnerabil... |
| CVE-2024-35538 | MEDIUM | 5.3 | 0.6% | Aug 19, 2024 | Typecho v1.3.0 was discovered to contain a Client IP Spoofing vulnerability, which allows attackers to falsify their IP ... |
| CVE-2024-43326 | MEDIUM | 5.4 | 0.3% | Aug 19, 2024 | Missing Authorization vulnerability in Jamie Bergen Plugin Notes Plus allows Accessing Functionality Not Properly Constr... |
| CVE-2024-43317 | MEDIUM | 6.1 | 0.3% | Aug 19, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Metagauss U... |
| CVE-2024-23729 | MEDIUM | 6.1 | 0.4% | Aug 19, 2024 | The ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a remote attacker to execute ... |
| CVE-2024-43281 | MEDIUM | 5.3 | 0.5% | Aug 19, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VOID CODERS Void Element... |
| CVE-2024-43280 | MEDIUM | 6.1 | 0.2% | Aug 19, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Salon Booking System Salon booking system.This issu... |
| CVE-2024-43272 | MEDIUM | 5.3 | 0.4% | Aug 19, 2024 | Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properl... |
| CVE-2024-43250 | MEDIUM | 6.5 | 0.3% | Aug 19, 2024 | Incorrect Authorization vulnerability in Bit Apps Bit Form Pro bitformpro allows Accessing Functionality Not Properly Co... |
| CVE-2024-43400 | MEDIUM | 5.4 | 0.5% | Aug 19, 2024 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible ... |
| CVE-2024-43236 | MEDIUM | 4.7 | 0.3% | Aug 19, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Scott Paterson Easy PayPal Buy Now Button.This issu... |
| CVE-2024-32928 | MEDIUM | 5.9 | 0.2% | Aug 19, 2024 | The libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest production devices which ena... |
| CVE-2024-25582 | MEDIUM | 5.4 | 0.4% | Aug 19, 2024 | Module savepoints could be abused to inject references to malicious code delivered through the same domain. Attackers co... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now