2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-6874 | MEDIUM | 4.3 | 0.8% | Jul 24, 2024 | libcurl's URL API function [curl_url_get()](https://curl.se/libcurl/c/curl_url_get.html) offers punycode conversions, to... |
| CVE-2024-3297 | MEDIUM | 6.5 | 0.2% | Jul 24, 2024 | An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between... |
| CVE-2024-6629 | MEDIUM | 5.4 | 0.3% | Jul 24, 2024 | The All-in-One Video Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video sh... |
| CVE-2024-6571 | MEDIUM | 5.3 | 0.4% | Jul 24, 2024 | The Optimize Images ALT Text (alt tag) & names for SEO using AI plugin for WordPress is vulnerable to Full Path Disclosu... |
| CVE-2024-6553 | MEDIUM | 5.3 | 0.4% | Jul 24, 2024 | The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Full Path Disclosure in all version... |
| CVE-2024-6836 | MEDIUM | 4.3 | 0.3% | Jul 24, 2024 | The Funnel Builder for WordPress by FunnelKit – Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps ... |
| CVE-2024-6094 | MEDIUM | 4.8 | 0.4% | Jul 24, 2024 | The WP ULike WordPress plugin before 4.7.1 does not sanitise and escape some of its settings, which could allow high pr... |
| CVE-2024-40767 | MEDIUM | 6.5 | 0.9% | Jul 24, 2024 | In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actuall... |
| CVE-2024-5861 | MEDIUM | 6.5 | 0.4% | Jul 24, 2024 | The WP EasyPay – Square for WordPress plugin for WordPress is vulnerable to unauthorized modification of datadue to a mi... |
| CVE-2024-3246 | MEDIUM | 5.4 | 0.2% | Jul 24, 2024 | The LiteSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and includin... |
| CVE-2024-6755 | MEDIUM | 5.3 | 0.3% | Jul 24, 2024 | The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing... |
| CVE-2024-6754 | MEDIUM | 4.3 | 0.3% | Jul 24, 2024 | The Social Auto Poster plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability c... |
| CVE-2024-6753 | MEDIUM | 6.1 | 0.8% | Jul 24, 2024 | The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mapTypes’ parameter in... |
| CVE-2024-6752 | MEDIUM | 5.4 | 0.2% | Jul 24, 2024 | The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_name’ parameter in ... |
| CVE-2024-6751 | MEDIUM | 6.5 | 0.2% | Jul 24, 2024 | The Social Auto Poster plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including... |
| CVE-2024-41656 | MEDIUM | 5.4 | 0.4% | Jul 23, 2024 | Sentry is an error tracking and performance monitoring platform. Starting in version 10.0.0 and prior to version 24.7.1,... |
| CVE-2024-41665 | MEDIUM | 5.4 | 0.4% | Jul 23, 2024 | Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XSS) vulnera... |
| CVE-2024-41664 | MEDIUM | 5.4 | 0.4% | Jul 23, 2024 | Canarytokens help track activity and actions on a network. Prior to `sha-8ea5315`, Canarytokens.org was vulnerable to a ... |
| CVE-2024-39702 | MEDIUM | 5.9 | 0.6% | Jul 23, 2024 | In lj_str_hash.c in OpenResty 1.19.3.1 through 1.25.3.1, the string hashing function (used during string interning) allo... |
| CVE-2024-6783 | MEDIUM | 4.8 | 0.5% | Jul 23, 2024 | A vulnerability has been discovered in Vue, that allows an attacker to perform XSS via prototype pollution. The attacker... |
| CVE-2024-41836 | MEDIUM | 5.5 | 0.2% | Jul 23, 2024 | InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a NULL Pointer Dereference vulnerability that cou... |
| CVE-2024-34128 | MEDIUM | 5.4 | 0.3% | Jul 23, 2024 | Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2024-41012 | MEDIUM | 6.3 | 0.2% | Jul 23, 2024 | In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close ra... |
| CVE-2024-6231 | MEDIUM | 5.9 | 0.3% | Jul 23, 2024 | The Request a Quote WordPress plugin before 2.4.1 does not sanitise and escape some of its settings, which could allow h... |
| CVE-2024-4260 | MEDIUM | 6.5 | 0.5% | Jul 23, 2024 | The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts vi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now