2024 CVE Vulnerabilities

39,225 CVEs published in 2024.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2024-43224MEDIUM6.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yuri Barano...
CVE-2024-43220MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in 10Web Form ...
CVE-2024-43218MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mediavine Mediavin...
CVE-2024-43216MEDIUM6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Filr filr...
CVE-2024-43210MEDIUM6.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LA-Studio L...
CVE-2024-43164MEDIUM6.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Blockspare ...
CVE-2024-43161MEDIUM4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Averta Depi...
CVE-2024-43156MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AddonMaster...
CVE-2024-43155MEDIUM6.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins...
CVE-2024-43152MEDIUM6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iberezansky...
CVE-2024-43151MEDIUM5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainstorm ...
CVE-2024-43359MEDIUM6.1ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting ...
CVE-2024-43358MEDIUM6.1ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting ...
CVE-2024-43231MEDIUM5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themeum Tut...
CVE-2024-43227MEDIUM5.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPDeveloper...
CVE-2024-6768MEDIUM6.8A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windo...
CVE-2024-40893MEDIUM6.8Multiple authenticated operating system (OS) command injection vulnerabilities exist in Firewalla Box Software versions...
CVE-2024-7700MEDIUM6.5A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install Packag...
CVE-2024-42474MEDIUM6.5Streamlit is a data oriented application development framework for python. Snowflake Streamlit open source addressed a s...
CVE-2024-42482MEDIUM6.5fish-shop/syntax-check is a GitHub action for syntax checking fish shell files. Improper neutralization of delimiters in...
CVE-2024-41909MEDIUM5.9Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-4879...
CVE-2024-42258MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: mm: huge_memory: use !CONFIG_64BIT to relax huge pa...
CVE-2024-33536MEDIUM5.4An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. The vulnerability occurs due to inadequate input val...
CVE-2024-33533MEDIUM5.4An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0, issue 1 of 2. A reflected cross-site scripting (XSS)...
CVE-2024-27443MEDIUM6.1An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. A Cross-Site Scripting (XSS) vulnerability exists in...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now