2024 CVE Vulnerabilities

39,266 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-4800HIGH8.8A vulnerability has been found in Kashipara College Management System 1.0 and classified as critical. This vulnerability...
CVE-2024-4799HIGH8.8A vulnerability, which was classified as critical, was found in Kashipara College Management System 1.0. This affects an...
CVE-2024-4796HIGH8.8A vulnerability was found in Campcodes Online Laundry Management System 1.0. It has been classified as critical. This af...
CVE-2024-4795HIGH8.8A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this...
CVE-2024-4794HIGH8.8A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by...
CVE-2024-4793HIGH8.8A vulnerability, which was classified as critical, was found in Campcodes Online Laundry Management System 1.0. Affected...
CVE-2024-4792HIGH8.8A vulnerability, which was classified as critical, has been found in Campcodes Online Laundry Management System 1.0. Thi...
CVE-2024-4791HIGH8.7A vulnerability classified as critical was found in Contemporary Control System BASrouter BACnet BASRT-B 2.7.2. This vul...
CVE-2024-4790HIGH7.5A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /s...
CVE-2024-4747HIGH7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Propovoice Propovo...
CVE-2024-4712HIGH7.8An arbitrary file creation vulnerability exists in PaperCut NG/MF that only affects Windows servers with Web Print enabl...
CVE-2024-4681HIGH7.2A vulnerability, which was classified as critical, was found in Campcodes Legal Case Management System 1.0. Affected is ...
CVE-2024-4605HIGH8.8The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 v...
CVE-2024-4545HIGH7.7 All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 ma...
CVE-2024-4441HIGH8.1The XML Sitemap & Google News plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and incl...
CVE-2024-4423HIGH7.2The access control in CemiPark software does not properly validate user-entered data, which allows the authentication by...
CVE-2024-4397HIGH8.8The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to arbitrary file uploads due to missing file t...
CVE-2024-4129HIGH8.8Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to...
CVE-2024-4068HIGH7.5The NPM package `braces`, versions prior to 3.0.3, fails to limit the number of characters it can handle, which could le...
CVE-2024-4044HIGH7.8A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may...
CVE-2024-3954HIGH8.8The Ditty plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.1.38 via deserialization of...
CVE-2024-3940HIGH8.8The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which...
CVE-2024-3903HIGH7.1The Add Custom CSS and JS WordPress plugin through 1.20 does not have CSRF check in some places, and is missing sanitisa...
CVE-2024-3828HIGH8.8The Spectra Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.5. ...
CVE-2024-3809HIGH8.8The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now