2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30305 | HIGH | 7.8 | 0.6% | May 2, 2024 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could... |
| CVE-2024-30304 | HIGH | 7.8 | 0.6% | May 2, 2024 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could... |
| CVE-2024-30303 | HIGH | 7.8 | 0.5% | May 2, 2024 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could... |
| CVE-2024-30301 | HIGH | 7.8 | 0.6% | May 2, 2024 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could... |
| CVE-2024-25047 | HIGH | 8.6 | 0.6% | May 2, 2024 | IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application l... |
| CVE-2024-4140 | HIGH | 7.5 | 1.1% | May 2, 2024 | An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service wh... |
| CVE-2024-34394 | HIGH | 8.1 | 1.0% | May 2, 2024 | libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking the namesp... |
| CVE-2024-34393 | HIGH | 8.1 | 1.0% | May 2, 2024 | libxmljs2 is vulnerable to a type confusion vulnerability when parsing a specially crafted XML while invoking a function... |
| CVE-2024-33396 | HIGH | 8.4 | 0.2% | May 2, 2024 | An issue in karmada-io karmada v1.9.0 and before allows a local attacker to execute arbitrary code via a crafted command... |
| CVE-2024-4215 | HIGH | 8.8 | 0.6% | May 2, 2024 | pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker ... |
| CVE-2024-4097 | HIGH | 7.2 | 0.6% | May 2, 2024 | The Cost Calculator Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG upload feature... |
| CVE-2024-4033 | HIGH | 8.8 | 1.6% | May 2, 2024 | The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type valid... |
| CVE-2024-3957 | HIGH | 7.3 | 0.9% | May 2, 2024 | The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and... |
| CVE-2024-3895 | HIGH | 8.8 | 0.9% | May 2, 2024 | The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability ch... |
| CVE-2024-3849 | HIGH | 8.8 | 1.7% | May 2, 2024 | The Click to Chat – HoliThemes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inc... |
| CVE-2024-3717 | HIGH | 7.5 | 0.7% | May 2, 2024 | The Drag and Drop Multiple File Upload – Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Expo... |
| CVE-2024-3715 | HIGH | 7.2 | 0.6% | May 2, 2024 | The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to Stored Cross-Site Script... |
| CVE-2024-3500 | HIGH | 8.8 | 1.1% | May 2, 2024 | The ElementsKit Pro plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.6... |
| CVE-2024-3499 | HIGH | 8.8 | 1.1% | May 2, 2024 | The ElementsKit Elementor addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and i... |
| CVE-2024-3047 | HIGH | 7.2 | 0.4% | May 2, 2024 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in ve... |
| CVE-2024-2831 | HIGH | 8.8 | 0.6% | May 2, 2024 | The Calendar plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes in all versions up to, and ... |
| CVE-2024-2661 | HIGH | 8.8 | 0.6% | May 2, 2024 | The Barcode Scanner and Inventory manager. POS (Point of Sale) – scan barcodes & create orders with barcode reader. plug... |
| CVE-2024-2417 | HIGH | 8.8 | 0.9% | May 2, 2024 | The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is ... |
| CVE-2024-25290 | HIGH | 8 | 0.7% | May 2, 2024 | An issue in Casa Systems NL1901ACV R6B032 allows a remote attacker to execute arbitrary code via the userName parameter ... |
| CVE-2024-1945 | HIGH | 7.1 | 0.4% | May 2, 2024 | The Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder plugin for WordPress is vulnerable to... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now