2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52797 | HIGH | 7.5 | 0.9% | Nov 21, 2024 | Opencast is free and open source software for automated video capture and distribution. First noticed in Opencast 13 and... |
| CVE-2024-52067 | MEDIUM | 4.9 | 0.7% | Nov 21, 2024 | Apache NiFi 1.16.0 through 1.28.0 and 2.0.0-M1 through 2.0.0-M4 include optional debug logging of Parameter Context valu... |
| CVE-2024-45663 | HIGH | 7.5 | 0.7% | Nov 21, 2024 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, 11.5, and 12.1 is vulnerable to a denial of serv... |
| CVE-2024-30896 | CRITICAL | 9.1 | 5.2% | Nov 21, 2024 | InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows aut... |
| CVE-2024-11596 | MEDIUM | 5.5 | 0.3% | Nov 21, 2024 | ECMP dissector crash in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet injection or cra... |
| CVE-2024-11595 | MEDIUM | 5.5 | 0.3% | Nov 21, 2024 | FiveCo RAP dissector infinite loop in Wireshark 4.4.0 to 4.4.1 and 4.2.0 to 4.2.8 allows denial of service via packet in... |
| CVE-2024-11456 | MEDIUM | 6.1 | 0.4% | Nov 21, 2024 | The Run Contests, Raffles, and Giveaways with ContestsWP plugin for WordPress is vulnerable to Reflected Cross-Site Scri... |
| CVE-2024-11455 | MEDIUM | 6.4 | 0.4% | Nov 21, 2024 | The Include Mastodon Feed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'include-ma... |
| CVE-2024-11447 | MEDIUM | 6.1 | 0.5% | Nov 21, 2024 | The Community by PeepSo – Download from PeepSo.com plugin for WordPress is vulnerable to Reflected Cross-Site Scripting ... |
| CVE-2024-11440 | MEDIUM | 6.4 | 0.5% | Nov 21, 2024 | The Grey Owl Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gol_button' sh... |
| CVE-2024-11438 | MEDIUM | 6.4 | 0.4% | Nov 21, 2024 | The StreamWeasels Online Status Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's '... |
| CVE-2024-11435 | MEDIUM | 6.1 | 0.5% | Nov 21, 2024 | The salavat counter Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter... |
| CVE-2024-11432 | MEDIUM | 6.4 | 1.2% | Nov 21, 2024 | The SuevaFree Essential Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'counter'... |
| CVE-2024-11428 | MEDIUM | 6.4 | 1.1% | Nov 21, 2024 | The Lazy load videos and sticky control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin... |
| CVE-2024-11424 | MEDIUM | 6.4 | 0.5% | Nov 21, 2024 | The Slick Sitemap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slick-sitemap' sho... |
| CVE-2024-11416 | MEDIUM | 6.1 | 0.3% | Nov 21, 2024 | The WIP Incoming Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includ... |
| CVE-2024-11414 | MEDIUM | 6.4 | 0.4% | Nov 21, 2024 | The RecipePress Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipe Ingredients in all... |
| CVE-2024-11412 | MEDIUM | 6.4 | 0.9% | Nov 21, 2024 | The Shine PDF Embeder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shinepdf' shor... |
| CVE-2024-11409 | HIGH | 7.2 | 1.1% | Nov 21, 2024 | The Grid View Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1... |
| CVE-2024-11388 | MEDIUM | 5.4 | 1.1% | Nov 21, 2024 | The Dino Game – Embed Google Chrome Dinosaur Game in WordPress plugin for WordPress is vulnerable to Stored Cross-Site S... |
| CVE-2024-11385 | MEDIUM | 5.4 | 0.4% | Nov 21, 2024 | The Pure CSS Circle Progress bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cir... |
| CVE-2024-11371 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The Theater for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_que... |
| CVE-2024-11370 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The Subaccounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of a... |
| CVE-2024-11365 | MEDIUM | 6.1 | 0.6% | Nov 21, 2024 | The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress is vulnerable to Reflected Cross-Site ... |
| CVE-2024-11360 | MEDIUM | 6.1 | 0.7% | Nov 21, 2024 | The Page Parts plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg w... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now