2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-11277 | MEDIUM | 6.1 | 0.3% | Nov 20, 2024 | The 404 Solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URLs in all versions up to, an... |
| CVE-2024-10900 | HIGH | 8.1 | 0.5% | Nov 20, 2024 | The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized modification ... |
| CVE-2024-10899 | HIGH | 7.3 | 0.6% | Nov 20, 2024 | The The WooCommerce Product Table Lite plugin for WordPress is vulnerable to arbitrary shortcode execution in all versio... |
| CVE-2024-10855 | HIGH | 8.1 | 0.5% | Nov 20, 2024 | The Image Optimizer, Resizer and CDN – Sirv plugin for WordPress is vulnerable to unauthorized modification of data that... |
| CVE-2024-10365 | MEDIUM | 4.3 | 0.3% | Nov 20, 2024 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre... |
| CVE-2024-9653 | MEDIUM | 6.1 | 0.3% | Nov 20, 2024 | The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Reflected Cross-Sit... |
| CVE-2024-52614 | MEDIUM | 4 | 0.2% | Nov 20, 2024 | Use of hard-coded cryptographic key issue exists in "Kura Sushi Official App Produced by EPARK" for Android versions pri... |
| CVE-2024-10515 | LOW | 3.5 | 0.3% | Nov 20, 2024 | In the process of testing the SEO Plugin by Squirrly SEO WordPress plugin before 12.3.21, a vulnerability was found that... |
| CVE-2024-11278 | MEDIUM | 6.1 | 0.4% | Nov 20, 2024 | The GD bbPress Attachments plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_qu... |
| CVE-2024-44309 | MEDIUM | 6.3 | 21.0% | Nov 20, 2024 | A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2... |
| CVE-2024-44308 | HIGH | 8.8 | 9.2% | Nov 20, 2024 | The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18... |
| CVE-2024-44307 | HIGH | 7.8 | 0.2% | Nov 20, 2024 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app ma... |
| CVE-2024-44306 | HIGH | 7.8 | 0.2% | Nov 20, 2024 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.6. An app ma... |
| CVE-2024-52595 | MEDIUM | 6.1 | 0.5% | Nov 19, 2024 | lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`. Prior to version 0.4.0, th... |
| CVE-2024-52392 | MEDIUM | 6.5 | 0.2% | Nov 19, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in w3speedster W3SPEEDSTER w3speedster-wp.This issue affects W3SPEEDSTER... |
| CVE-2024-51669 | HIGH | 8.8 | 0.2% | Nov 19, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Kalmang Dynamic Widgets dynamic-widgets.This issue affects Dynamic Wi... |
| CVE-2024-30424 | MEDIUM | 5.4 | 0.2% | Nov 19, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPZOOM Beaver Buil... |
| CVE-2024-11400 | MEDIUM | 6.1 | 0.3% | Nov 19, 2024 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scri... |
| CVE-2024-52763 | MEDIUM | 5.4 | 0.6% | Nov 19, 2024 | A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows ... |
| CVE-2024-52762 | MEDIUM | 5.4 | 0.8% | Nov 19, 2024 | A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows atta... |
| CVE-2024-52360 | CRITICAL | 9.8 | 0.4% | Nov 19, 2024 | IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 is vulnerable to SQL injection. A remote attacker could send speci... |
| CVE-2024-52359 | HIGH | 8.8 | 0.3% | Nov 19, 2024 | IBM Concert Software 1.0.0, 1.0.1, 1.0.2, and 1.0.2.1 could allow an authenticated user to perform unauthorized actions ... |
| CVE-2024-45422 | HIGH | 7.5 | 0.5% | Nov 19, 2024 | Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial o... |
| CVE-2024-45420 | MEDIUM | 6.5 | 0.4% | Nov 19, 2024 | Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a de... |
| CVE-2024-45419 | HIGH | 7.5 | 0.5% | Nov 19, 2024 | Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now