2024 CVE Vulnerabilities

39,266 CVEs published in 2024.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2024-41432MEDIUM5.3An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to repl...
CVE-2024-41252MEDIUM6.5An Incorrect Access Control vulnerability was found in /smsa/admin_student_register_approval.php and /smsa/admin_student...
CVE-2024-41251MEDIUM6.5An Incorrect Access Control vulnerability was found in /smsa/admin_teacher_register_approval.php and /smsa/admin_teacher...
CVE-2024-41249MEDIUM5.3An Incorrect Access Control vulnerability was found in /smsa/view_subject.php in Kashipara Responsive School Management ...
CVE-2024-41248MEDIUM5.3An Incorrect Access Control vulnerability was found in /smsa/add_subject.php and /smsa/add_subject_submit.php in Kashipa...
CVE-2024-41247MEDIUM5.3An Incorrect Access Control vulnerability was found in /smsa/add_class.php and /smsa/add_class_submit.php in Kashipara R...
CVE-2024-41246MEDIUM5.3An Incorrect Access Control vulnerability was found in /smsa/admin_dashboard.php in Kashipara Responsive School Manageme...
CVE-2024-43045MEDIUM6.3Jenkins 2.470 and earlier, LTS 2.452.3 and earlier does not perform a permission check in an HTTP endpoint, allowing att...
CVE-2024-7355MEDIUM5.4The Organization chart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title_input’ and 'node...
CVE-2024-7353MEDIUM5.4The Accept Stripe Payments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's accept_str...
CVE-2024-7267MEDIUM6.5Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy E...
CVE-2024-7266MEDIUM4.3Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP al...
CVE-2024-42222MEDIUM4.3In Apache CloudStack 4.19.1.0, a regression in the network listing API allows unauthorised list access of network detail...
CVE-2024-6494MEDIUM6.1The WordPress File Upload WordPress plugin before 4.24.8 does not properly sanitize and escape certain parameters, which...
CVE-2024-3973MEDIUM4.8The House Manager WordPress plugin through 1.0.8.4 does not sanitise and escape a parameter before outputting it back i...
CVE-2024-37403MEDIUM5.5Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to pr...
CVE-2024-34788MEDIUM6.5An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to ac...
CVE-2024-34636MEDIUM5.5Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local attackers to ...
CVE-2024-34631MEDIUM5.5Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentia...
CVE-2024-34630MEDIUM5.5Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attacker...
CVE-2024-34629MEDIUM5.5Out-of-bounds read in applying binary with text common object in Samsung Notes prior to version 4.4.21.62 allows local a...
CVE-2024-34628MEDIUM5.5Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to po...
CVE-2024-34627MEDIUM5.5Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potenti...
CVE-2024-34626MEDIUM5.5Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentia...
CVE-2024-34625MEDIUM5.5Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to po...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now