2024 CVE Vulnerabilities
39,217 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37210 | MEDIUM | 6.5 | 0.3% | Jun 17, 2026 | Missing Authorization vulnerability in ali2woo AliNext allows Exploiting Incorrectly Configured Access Control Security ... |
| CVE-2024-35690 | MEDIUM | 6.5 | 0.3% | Jun 17, 2026 | Insertion of sensitive information into sent data vulnerability in MarketingFire Widget Options allows Retrieve Embedded... |
| CVE-2024-35648 | MEDIUM | 4.3 | 0.1% | Jun 17, 2026 | Cross-Site request forgery (CSRF) vulnerability in Andy Moyle Emergency Password Reset allows Cross Site Request Forgery... |
| CVE-2024-34810 | MEDIUM | 4.3 | 0.1% | Jun 17, 2026 | Cross-Site request forgery (CSRF) vulnerability in Extend Themes Skyline WP allows Cross Site Request Forgery. This iss... |
| CVE-2024-33909 | MEDIUM | 5.3 | 0.2% | Jun 17, 2026 | Missing Authorization vulnerability in Avirtum iPages Flipbook allows Exploiting Incorrectly Configured Access Control S... |
| CVE-2024-33685 | MEDIUM | 4.3 | 0.2% | Jun 17, 2026 | Missing Authorization vulnerability in Jegstudio Startupzy startupzy allows Exploiting Incorrectly Configured Access Con... |
| CVE-2024-32949 | HIGH | 8.3 | 0.3% | Jun 17, 2026 | Missing Authorization vulnerability in Prince Integrate Google Drive allows Exploiting Incorrectly Configured Access Con... |
| CVE-2024-32729 | HIGH | 7.5 | 0.4% | Jun 17, 2026 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversatio... |
| CVE-2024-31435 | MEDIUM | 4.3 | 0.2% | Jun 17, 2026 | : Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Acce... |
| CVE-2024-24709 | MEDIUM | 4.3 | 0.2% | Jun 17, 2026 | Missing Authorization vulnerability in Shareaholic allows Exploiting Incorrectly Configured Access Control Security Leve... |
| CVE-2024-39575 | HIGH | 7.4 | 0.1% | Jun 16, 2026 | update_disk_psu_baseline.sh requires password in plain text |
| CVE-2024-38487 | HIGH | 7 | 0.1% | Jun 16, 2026 | api-gateway container running with root privilege would allow an attacker to escape the container and access host system... |
| CVE-2024-30476 | MEDIUM | 5.4 | 0.2% | Jun 16, 2026 | PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager. A remote authenticated low-pr... |
| CVE-2024-24909 | HIGH | 8.8 | 0.4% | Jun 16, 2026 | Dell OpenManage Integration with Microsoft Windows Admin Center contains a Remote Code Execution vulnerability in the ga... |
| CVE-2024-22451 | MEDIUM | 6.7 | 0.1% | Jun 16, 2026 | Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An att... |
| CVE-2024-22447 | HIGH | 7.8 | 0.1% | Jun 16, 2026 | Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker... |
| CVE-2024-45636 | MEDIUM | 4.4 | 0.1% | Jun 11, 2026 | IBM Security QRadar EDR 3.12 through 3.12.24 stores user credentials in plain text which can be read by a local privileg... |
| CVE-2024-32110 | MEDIUM | 4.3 | 0.1% | Jun 11, 2026 | Cross-Site request forgery (CSRF) vulnerability in Magepeople inc. WpEvently allows Cross Site Request Forgery. This is... |
| CVE-2024-21944 | MEDIUM | 5.3 | 0.2% | Jun 10, 2026 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, r... |
| CVE-2024-58350 | MEDIUM | 4 | 0.1% | Jun 10, 2026 | Ghidra before 11.2 contains a use after free vulnerability in the Sleigh backend caused by undefined static initializati... |
| CVE-2024-56123 | — | — | — | Jun 8, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-56122 | — | — | — | Jun 8, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-56121 | — | — | — | Jun 8, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-56120 | — | — | — | Jun 8, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2024-58349 | CRITICAL | 9.8 | 0.7% | Jun 8, 2026 | WordPress Theme Travelscape 1.0.3 contains an arbitrary file upload vulnerability that allows unauthenticated attackers ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now