2024 CVE Vulnerabilities
39,266 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-42115 | MEDIUM | 5.5 | 0.3% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: jffs2: Fix potential illegal address access in jffs... |
| CVE-2024-42114 | MEDIUM | 4.4 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM v... |
| CVE-2024-42113 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx i... |
| CVE-2024-42111 | MEDIUM | 6.3 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always do the basic checks for btrfs_qgroup_... |
| CVE-2024-42110 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: ntb_netdev: Move ntb_netdev_rx_handler() to ca... |
| CVE-2024-42109 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unconditionally flush pending... |
| CVE-2024-42108 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: net: rswitch: Avoid use-after-free in rswitch_poll(... |
| CVE-2024-42107 | MEDIUM | 4.7 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't process extts if PTP is disabled The ic... |
| CVE-2024-42106 | MEDIUM | 5.5 | 0.3% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag... |
| CVE-2024-42103 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix adding block group to a reclaim list and... |
| CVE-2024-42102 | MEDIUM | 4.7 | 0.3% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: Revert "mm/writeback: fix possible divide-by-zero i... |
| CVE-2024-42101 | MEDIUM | 5.5 | 0.3% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix null pointer dereference in nouvea... |
| CVE-2024-42100 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: common: Don't call hw_to_ccu_common ... |
| CVE-2024-42099 | MEDIUM | 5.5 | 0.2% | Jul 30, 2024 | In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CC... |
| CVE-2024-7100 | MEDIUM | 5.4 | 0.4% | Jul 30, 2024 | The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bt_bb_button sh... |
| CVE-2024-40094 | MEDIUM | 5.3 | 0.9% | Jul 30, 2024 | GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of prev... |
| CVE-2024-6536 | MEDIUM | 5.4 | 0.7% | Jul 30, 2024 | The Zephyr Project Manager WordPress plugin before 3.3.99 does not sanitise and escape some of its settings, which could... |
| CVE-2024-6230 | MEDIUM | 6.5 | 0.2% | Jul 30, 2024 | The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its form fields... |
| CVE-2024-6226 | MEDIUM | 6.1 | 0.3% | Jul 30, 2024 | The WpStickyBar WordPress plugin through 2.1.0 does not sanitise and escape a parameter before outputting it back in th... |
| CVE-2024-6224 | MEDIUM | 5.9 | 0.2% | Jul 30, 2024 | The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not have CSRF check in some places, and i... |
| CVE-2024-6223 | MEDIUM | 6.1 | 0.4% | Jul 30, 2024 | The Send email only on Reply to My Comment WordPress plugin through 1.0.6 does not sanitise and escape a parameter befor... |
| CVE-2024-6021 | MEDIUM | 6.8 | 0.4% | Jul 30, 2024 | The Donation Block For PayPal WordPress plugin through 2.1.0 does not sanitise and escape form submissions, leading to a... |
| CVE-2024-5809 | MEDIUM | 6.1 | 0.3% | Jul 30, 2024 | The WP Ajax Contact Form WordPress plugin through 2.2.2 does not sanitise and escape a parameter before outputting it ba... |
| CVE-2024-5808 | MEDIUM | 4.3 | 0.2% | Jul 30, 2024 | The WP Ajax Contact Form WordPress plugin through 2.2.2 does not have CSRF check in place when deleting emails from the ... |
| CVE-2024-4096 | MEDIUM | 5.9 | 0.4% | Jul 30, 2024 | The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could al... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now