2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52582 | MEDIUM | 4.7 | 0.2% | Nov 19, 2024 | Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build p... |
| CVE-2024-50803 | MEDIUM | 5.4 | 0.5% | Nov 19, 2024 | The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allow... |
| CVE-2024-10524 | MEDIUM | 6.5 | 1.1% | Nov 19, 2024 | Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the U... |
| CVE-2024-52711 | MEDIUM | 5.7 | 0.6% | Nov 19, 2024 | DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter. |
| CVE-2024-11075 | HIGH | 8.8 | 0.2% | Nov 19, 2024 | A vulnerability in the Incoming Goods Suite allows a user with unprivileged access to the underlying system (e.g. local ... |
| CVE-2024-10204 | HIGH | 7.8 | 0.2% | Nov 19, 2024 | Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in... |
| CVE-2024-9830 | MEDIUM | 6.1 | 0.4% | Nov 19, 2024 | The Bard theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without app... |
| CVE-2024-9777 | MEDIUM | 6.1 | 0.4% | Nov 19, 2024 | The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without app... |
| CVE-2024-52675 | CRITICAL | 9.8 | 0.5% | Nov 19, 2024 | SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php. |
| CVE-2024-11224 | MEDIUM | 6.4 | 0.4% | Nov 19, 2024 | The Parallax Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘position’ parameter in all... |
| CVE-2024-11198 | MEDIUM | 6.4 | 0.4% | Nov 19, 2024 | The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘extra_class’ parameter i... |
| CVE-2024-11194 | HIGH | 8.8 | 0.5% | Nov 19, 2024 | The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized m... |
| CVE-2024-11195 | MEDIUM | 6.4 | 0.4% | Nov 19, 2024 | The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_em... |
| CVE-2024-11038 | HIGH | 7.3 | 0.6% | Nov 19, 2024 | The The WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup plugin for WordPress... |
| CVE-2024-11036 | CRITICAL | 9.8 | 0.7% | Nov 19, 2024 | The The GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for Wo... |
| CVE-2024-31141 | MEDIUM | 6.5 | 1.1% | Nov 19, 2024 | Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients... |
| CVE-2024-11098 | MEDIUM | 5.5 | 0.4% | Nov 19, 2024 | The SVG Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REST API SVG File uploads in all ver... |
| CVE-2024-11069 | CRITICAL | 9.1 | 0.4% | Nov 19, 2024 | The WordPress GDPR plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on ... |
| CVE-2024-10388 | MEDIUM | 6.1 | 0.3% | Nov 19, 2024 | The WordPress GDPR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr_firstname' and 'gdpr_... |
| CVE-2024-10268 | MEDIUM | 5.4 | 0.3% | Nov 19, 2024 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross... |
| CVE-2024-8403 | HIGH | 7.5 | 0.7% | Nov 19, 2024 | Improper Validation of Specified Type of Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-E... |
| CVE-2024-10103 | MEDIUM | 6.1 | 0.3% | Nov 19, 2024 | In the process of testing the MailPoet WordPress plugin before 5.3.2, a vulnerability was found that allows you to impl... |
| CVE-2024-21539 | HIGH | 7.7 | 0.5% | Nov 19, 2024 | Versions of the package @eslint/plugin-kit before 0.2.3 are vulnerable to Regular Expression Denial of Service (ReDoS) d... |
| CVE-2024-50302 | MEDIUM | 5.5 | 0.8% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since... |
| CVE-2024-50301 | HIGH | 7.1 | 0.3% | Nov 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: security/keys: fix slab-out-of-bounds in key_task_p... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now