2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-3808 | HIGH | 8.8 | 1.0% | May 14, 2024 | The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and in... |
| CVE-2024-3807 | HIGH | 8.8 | 1.5% | May 14, 2024 | The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via 'por... |
| CVE-2024-3727 | HIGH | 8.3 | 1.3% | May 14, 2024 | A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authentica... |
| CVE-2024-3460 | HIGH | 7 | 0.3% | May 14, 2024 | In KioWare for Windows (versions all through 8.34) it is possible to exit this software and use other already opened app... |
| CVE-2024-3459 | HIGH | 7.8 | 0.3% | May 14, 2024 | KioWare for Windows (versions all through 8.34) allows to escape the environment by downloading PDF files, which then by... |
| CVE-2024-3055 | HIGH | 8.8 | 0.8% | May 14, 2024 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to time-based ... |
| CVE-2024-3037 | HIGH | 7.8 | 0.4% | May 14, 2024 | An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print... |
| CVE-2024-35205 | HIGH | 7.8 | 0.8% | May 14, 2024 | The WPS Office (aka cn.wps.moffice_eng) application before 17.0.0 for Android fails to properly sanitize file names befo... |
| CVE-2024-35204 | HIGH | 8.4 | 0.2% | May 14, 2024 | Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus lo... |
| CVE-2024-35166 | HIGH | 7.5 | 0.6% | May 14, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ninja Team Filebird.This issue affects Fileb... |
| CVE-2024-35050 | HIGH | 8.8 | 0.7% | May 14, 2024 | An issue in SurveyKing v1.3.1 allows attackers to escalate privileges via re-using the session ID of a user that was del... |
| CVE-2024-34974 | HIGH | 8.2 | 0.7% | May 14, 2024 | Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter. |
| CVE-2024-34944 | HIGH | 8.8 | 0.4% | May 14, 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the list1 param... |
| CVE-2024-34942 | HIGH | 8.8 | 0.9% | May 14, 2024 | Tenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 p... |
| CVE-2024-34921 | HIGH | 8.8 | 9.3% | May 14, 2024 | TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function. |
| CVE-2024-34818 | HIGH | 7.1 | 0.2% | May 14, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WebinarPress.This issue affects WebinarPress: from n/a through 1.33.1... |
| CVE-2024-34559 | HIGH | 7.5 | 0.7% | May 14, 2024 | Insertion of Sensitive Information into Log File vulnerability in Ghost Foundation Ghost.This issue affects Ghost: from ... |
| CVE-2024-34459 | HIGH | 7.5 | 2.3% | May 14, 2024 | An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with... |
| CVE-2024-34440 | HIGH | 7.2 | 0.8% | May 14, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affect... |
| CVE-2024-34433 | HIGH | 7.2 | 0.5% | May 14, 2024 | Deserialization of Untrusted Data vulnerability in OCDI One Click Demo Import.This issue affects One Click Demo Import: ... |
| CVE-2024-34431 | HIGH | 7.1 | 0.4% | May 14, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP-etracker WP etr... |
| CVE-2024-34360 | HIGH | 8.2 | 0.7% | May 14, 2024 | go-spacemesh is a Go implementation of the Spacemesh protocol full node. Nodes can publish activations transactions (ATX... |
| CVE-2024-34352 | HIGH | 7.5 | 1.3% | May 14, 2024 | 1Panel is an open source Linux server operation and maintenance management panel. Prior to v1.10.3-lts, there are many ... |
| CVE-2024-34351 | HIGH | 7.5 | 5.5% | May 14, 2024 | Next.js is a React framework that can provide building blocks to create web applications. A Server-Side Request Forgery ... |
| CVE-2024-34350 | HIGH | 7.5 | 1.2% | May 14, 2024 | Next.js is a React framework that can provide building blocks to create web applications. Prior to 13.5.1, an inconsiste... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now