2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5708 | MEDIUM | 5.4 | 0.2% | Aug 6, 2024 | The WPBakery Visual Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter ... |
| CVE-2024-39817 | MEDIUM | 6.5 | 0.4% | Aug 6, 2024 | Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user... |
| CVE-2024-7008 | MEDIUM | 6.1 | 24.1% | Aug 6, 2024 | Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting. |
| CVE-2024-5963 | MEDIUM | 6.7 | 0.2% | Aug 6, 2024 | Unquoted Executable Path vulnerability in Hitachi Device Manager on Windows (Device Manager Server component).This issue... |
| CVE-2024-7537 | MEDIUM | 5.5 | 0.3% | Aug 6, 2024 | oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attacker... |
| CVE-2024-34343 | MEDIUM | 6.1 | 0.4% | Aug 5, 2024 | Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. The `navigateTo... |
| CVE-2024-41960 | MEDIUM | 4.8 | 0.3% | Aug 5, 2024 | mailcow: dockerized is an open source groupware/email suite based on docker. An authenticated admin user can inject a Ja... |
| CVE-2024-41959 | MEDIUM | 6.1 | 0.3% | Aug 5, 2024 | mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a Ja... |
| CVE-2024-41820 | MEDIUM | 6 | 0.4% | Aug 5, 2024 | Kubean is a cluster lifecycle management toolchain based on kubespray and other cluster LCM engine. The ClusterRole has ... |
| CVE-2024-41816 | MEDIUM | 5.4 | 0.4% | Aug 5, 2024 | Cooked is a recipe plugin for WordPress. The Cooked plugin for WordPress is vulnerable to Persistent Cross-Site Scriptin... |
| CVE-2024-6361 | MEDIUM | 5.4 | 0.2% | Aug 5, 2024 | Improper Neutralization vulnerability (XSS) has been discovered in OpenText™ ALM Octane. The vulnerability affects all v... |
| CVE-2024-41381 | MEDIUM | 6.1 | 0.3% | Aug 5, 2024 | microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\settings\ad... |
| CVE-2024-41380 | MEDIUM | 6.1 | 0.3% | Aug 5, 2024 | microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\tags\add_ta... |
| CVE-2024-41200 | MEDIUM | 5.5 | 0.2% | Aug 5, 2024 | A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file. |
| CVE-2024-23357 | MEDIUM | 5.5 | 0.1% | Aug 5, 2024 | Transient DOS while importing a PKCS#8-encoded RSA key with zero bytes modulus. |
| CVE-2024-23350 | MEDIUM | 6.5 | 0.2% | Aug 5, 2024 | Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integr... |
| CVE-2024-6710 | MEDIUM | 5.4 | 0.3% | Aug 5, 2024 | The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a r... |
| CVE-2024-6498 | MEDIUM | 4.8 | 0.3% | Aug 5, 2024 | The Chatbot for WordPress by Collect.chat ⚡️ WordPress plugin before 2.4.4 does not sanitise and escape some of its sett... |
| CVE-2024-6270 | MEDIUM | 4.8 | 0.3% | Aug 5, 2024 | The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow ... |
| CVE-2024-5081 | MEDIUM | 6.1 | 0.2% | Aug 5, 2024 | The wp-eMember WordPress plugin before v10.7.0 does not have CSRF check in some places, and is missing sanitisation as w... |
| CVE-2024-3636 | MEDIUM | 5.4 | 0.3% | Aug 5, 2024 | The Pinpoint Booking System WordPress plugin before 2.9.9.4.8 does not sanitise and escape some of its settings, which ... |
| CVE-2024-7466 | MEDIUM | 5.4 | 0.4% | Aug 5, 2024 | A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unkno... |
| CVE-2024-7453 | MEDIUM | 4.8 | 0.4% | Aug 4, 2024 | A vulnerability was found in FastAdmin 1.5.0.20240328. It has been declared as problematic. This vulnerability affects u... |
| CVE-2024-6331 | MEDIUM | 6.5 | 0.5% | Aug 4, 2024 | stitionai/devika main branch as of commit cdfb782b0e634b773b10963c8034dc9207ba1f9f is vulnerable to Local File Read (LFI... |
| CVE-2024-7438 | MEDIUM | 4.3 | 0.5% | Aug 3, 2024 | A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now