2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-4784 | MEDIUM | 5.4 | 0.3% | Aug 8, 2024 | An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 befor... |
| CVE-2024-4210 | MEDIUM | 6.5 | 0.5% | Aug 8, 2024 | A Denial of Service (DoS) condition has been discovered in GitLab CE/EE affecting all versions starting with 12.6 before... |
| CVE-2024-42037 | MEDIUM | 6.2 | 0.1% | Aug 8, 2024 | Vulnerability of uncaught exceptions in the Graphics module Impact: Successful exploitation of this vulnerability may af... |
| CVE-2024-42034 | MEDIUM | 5.5 | 0.1% | Aug 8, 2024 | LaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this vulnerability may affect ser... |
| CVE-2024-42255 | MEDIUM | 5.5 | 0.2% | Aug 8, 2024 | In the Linux kernel, the following vulnerability has been resolved: tpm: Use auth only after NULL check in tpm_buf_chec... |
| CVE-2024-42254 | MEDIUM | 5.5 | 0.2% | Aug 8, 2024 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix error pbuf checking Syz reports a pr... |
| CVE-2024-42253 | MEDIUM | 4.7 | 0.2% | Aug 8, 2024 | In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock race... |
| CVE-2024-42252 | MEDIUM | 5.5 | 0.2% | Aug 8, 2024 | In the Linux kernel, the following vulnerability has been resolved: closures: Change BUG_ON() to WARN_ON() If a BUG_ON... |
| CVE-2024-42251 | MEDIUM | 5.5 | 0.2% | Aug 8, 2024 | In the Linux kernel, the following vulnerability has been resolved: mm: page_ref: remove folio_try_get_rcu() The below... |
| CVE-2024-42032 | MEDIUM | 5.5 | 0.1% | Aug 8, 2024 | Access permission verification vulnerability in the Contacts module Impact: Successful exploitation of this vulnerabilit... |
| CVE-2024-42030 | MEDIUM | 6.2 | 0.1% | Aug 8, 2024 | Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of thi... |
| CVE-2024-7548 | MEDIUM | 6.5 | 0.6% | Aug 8, 2024 | The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' par... |
| CVE-2024-6884 | MEDIUM | 5.4 | 0.4% | Aug 8, 2024 | The Gutenberg Blocks with AI by Kadence WP WordPress plugin before 3.2.39 does not validate and escape some of its bloc... |
| CVE-2024-6824 | MEDIUM | 4.3 | 0.4% | Aug 8, 2024 | The Premium Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification and loss of data due to... |
| CVE-2024-6481 | MEDIUM | 4.8 | 0.3% | Aug 8, 2024 | The Search & Filter Pro WordPress plugin before 2.5.18 does not sanitise and escape some of its settings, which could al... |
| CVE-2024-5226 | MEDIUM | 5.4 | 0.3% | Aug 8, 2024 | The Fuse Social Floating Sidebar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the file upload f... |
| CVE-2024-6987 | MEDIUM | 4.3 | 0.3% | Aug 8, 2024 | The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability chec... |
| CVE-2024-5668 | MEDIUM | 5.4 | 0.3% | Aug 8, 2024 | The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to DOM-based Stored Cross-Site S... |
| CVE-2024-6552 | MEDIUM | 5.3 | 0.4% | Aug 8, 2024 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Full Path Disclosure in ... |
| CVE-2024-6254 | MEDIUM | 6.1 | 0.3% | Aug 8, 2024 | The Brizy – Page Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inc... |
| CVE-2024-21302 | MEDIUM | 6.7 | 1.6% | Aug 8, 2024 | Summary: As of July 8, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance f... |
| CVE-2024-6892 | MEDIUM | 6.1 | 0.7% | Aug 8, 2024 | Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the Journyx w... |
| CVE-2024-6706 | MEDIUM | 6.1 | 0.6% | Aug 7, 2024 | Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the contex... |
| CVE-2024-41239 | MEDIUM | 4.8 | 0.5% | Aug 7, 2024 | A Stored Cross Site Scripting (XSS) vulnerability was found in "/smsa/add_class_submit.php" in Responsive School Managem... |
| CVE-2024-41242 | MEDIUM | 6.1 | 0.5% | Aug 7, 2024 | A Reflected Cross Site Scripting (XSS) vulnerability was found in /smsa/student_login.php in Kashipara Responsive School... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now