2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7300 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file ... |
| CVE-2024-7299 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issu... |
| CVE-2024-6412 | MEDIUM | 6.5 | 0.3% | Jul 31, 2024 | The HTML Forms WordPress plugin before 1.3.34 does not have CSRF checks in some places, which could allow attackers to ... |
| CVE-2024-6408 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | The Slider by 10Web WordPress plugin before 1.2.57 does not sanitise and escape its Slider Title, which could allow hig... |
| CVE-2024-6272 | MEDIUM | 6.1 | 0.3% | Jul 31, 2024 | The SpiderContacts WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2024-6165 | MEDIUM | 4.8 | 0.4% | Jul 31, 2024 | The WANotifier WordPress plugin before 2.6.1 does not sanitise and escape some of its settings, which could allow high ... |
| CVE-2024-7285 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | A vulnerability has been found in SourceCodester Establishment Billing Management System 1.0 and classified as problemat... |
| CVE-2024-39947 | MEDIUM | 6.5 | 0.5% | Jul 31, 2024 | A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker... |
| CVE-2024-39945 | MEDIUM | 4.9 | 0.5% | Jul 31, 2024 | A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attack... |
| CVE-2024-7284 | MEDIUM | 5.4 | 0.4% | Jul 31, 2024 | A vulnerability, which was classified as problematic, was found in SourceCodester Lot Reservation Management System 1.0.... |
| CVE-2024-37281 | MEDIUM | 6.5 | 0.4% | Jul 30, 2024 | An issue was discovered in Kibana where a user with Viewer role could cause a Kibana instance to crash by sending a larg... |
| CVE-2024-5901 | MEDIUM | 5.4 | 0.4% | Jul 30, 2024 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Grid widge... |
| CVE-2024-5250 | MEDIUM | 5.3 | 0.3% | Jul 30, 2024 | In versions of Akana API Platform prior to 2024.1.0 overly verbose errors can be found in SAML integrations |
| CVE-2024-41443 | MEDIUM | 5.5 | 0.4% | Jul 30, 2024 | A stack overflow in the function cp_dynamic() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial ... |
| CVE-2024-41440 | MEDIUM | 6.2 | 0.8% | Jul 30, 2024 | A heap buffer overflow in the function png_quantize() of hicolor v0.5.0 allows attackers to cause a Denial of Service (D... |
| CVE-2024-41439 | MEDIUM | 5.5 | 0.4% | Jul 30, 2024 | A heap buffer overflow in the function cp_block() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Den... |
| CVE-2024-41438 | MEDIUM | 6.2 | 0.8% | Jul 30, 2024 | A heap buffer overflow in the function cp_stored() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a De... |
| CVE-2024-41437 | MEDIUM | 5.5 | 0.4% | Jul 30, 2024 | A heap buffer overflow in the function cp_unfilter() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a ... |
| CVE-2024-41943 | MEDIUM | 4.6 | 0.3% | Jul 30, 2024 | I, Librarian is an open-source version of a PDF managing SaaS. PDF notes are displayed on the Item Summary page without ... |
| CVE-2024-41305 | MEDIUM | 4.7 | 0.2% | Jul 30, 2024 | A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application t... |
| CVE-2024-41304 | MEDIUM | 5.4 | 0.4% | Jul 30, 2024 | An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execut... |
| CVE-2024-7209 | MEDIUM | 6.5 | 0.3% | Jul 30, 2024 | A vulnerability exists in the use of shared SPF records in multi-tenant hosting providers, allowing attackers to use net... |
| CVE-2024-7208 | MEDIUM | 6.5 | 0.4% | Jul 30, 2024 | A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain,... |
| CVE-2024-5486 | MEDIUM | 4.9 | 0.3% | Jul 30, 2024 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access ... |
| CVE-2024-41944 | MEDIUM | 6.5 | 0.4% | Jul 30, 2024 | Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `report/data/proofofplay... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now