2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22120 | HIGH | 8.8 | 76.6% | May 17, 2024 | Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "... |
| CVE-2024-34370 | HIGH | 7.2 | 1.1% | May 17, 2024 | Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affe... |
| CVE-2024-33569 | HIGH | 7.2 | 0.5% | May 17, 2024 | Improper Privilege Management vulnerability in Darren Cooney Instant Images allows Privilege Escalation.This issue affec... |
| CVE-2024-33550 | HIGH | 8.8 | 0.5% | May 17, 2024 | Improper Privilege Management vulnerability in JR King/Eran Schoellhorn WP Masquerade allows Privilege Escalation.This i... |
| CVE-2024-33549 | HIGH | 8.8 | 0.5% | May 17, 2024 | Improper Privilege Management vulnerability in AA-Team WZone allows Privilege Escalation.This issue affects WZone: from ... |
| CVE-2024-32680 | HIGH | 8.8 | 0.7% | May 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Control of Generation of Code (... |
| CVE-2024-32523 | HIGH | 8.1 | 1.8% | May 17, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-32507 | HIGH | 8.8 | 0.5% | May 17, 2024 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue ... |
| CVE-2024-32131 | HIGH | 7.5 | 0.4% | May 17, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in W3 Eden Inc. Download Manager allows Functio... |
| CVE-2024-31300 | HIGH | 8.5 | 0.6% | May 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in appscreo Easy Social Sha... |
| CVE-2024-31237 | HIGH | 7.5 | 0.4% | May 17, 2024 | Improper Privilege Management vulnerability in WP Sharks s2Member Pro allows Privilege Escalation.This issue affects s2M... |
| CVE-2024-31232 | HIGH | 8 | 0.6% | May 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sizam Design Rehub allow... |
| CVE-2024-30527 | HIGH | 7.5 | 0.5% | May 17, 2024 | Improper Validation of Specified Quantity in Input vulnerability in Tips and Tricks HQ WP Express Checkout (Accept PayPa... |
| CVE-2024-27971 | HIGH | 8.3 | 1.5% | May 17, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-27955 | HIGH | 8.8 | 0.3% | May 17, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WP Automatic Automatic allows Privilege Escalation.This issue affects... |
| CVE-2024-24934 | HIGH | 8.1 | 0.7% | May 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Elementor Elementor Webs... |
| CVE-2024-24869 | HIGH | 7.5 | 0.7% | May 17, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in BoldGrid Total Upkeep al... |
| CVE-2024-22145 | HIGH | 8.8 | 1.1% | May 17, 2024 | Incorrect Privilege Assignment vulnerability in InstaWP InstaWP Connect instawp-connect.This issue affects InstaWP Conne... |
| CVE-2024-21746 | HIGH | 7.5 | 0.5% | May 17, 2024 | Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing... |
| CVE-2024-34752 | HIGH | 7.1 | 0.3% | May 17, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PluginOps L... |
| CVE-2024-30060 | HIGH | 7.8 | 0.5% | May 16, 2024 | Azure Monitor Agent Elevation of Privilege Vulnerability |
| CVE-2024-24981 | HIGH | 7.5 | 0.2% | May 16, 2024 | Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some Intel(R) Server M50FCP Family products may ... |
| CVE-2024-23980 | HIGH | 7.5 | 0.2% | May 16, 2024 | Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products m... |
| CVE-2024-23487 | HIGH | 7.5 | 0.2% | May 16, 2024 | Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some Intel(R) Server D50DNP Family produc... |
| CVE-2024-22382 | HIGH | 7.5 | 0.2% | May 16, 2024 | Improper input validation in PprRequestLog module in UEFI firmware for some Intel(R) Server D50DNP Family products may a... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now