2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1897 | HIGH | 7.5 | 0.9% | May 2, 2024 | The Grid Gallery – Photo Image Grid Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions u... |
| CVE-2024-1896 | HIGH | 7.5 | 0.9% | May 2, 2024 | The Photo Gallery – Responsive Photo Gallery, Image Gallery, Portfolio Gallery, Logo Gallery And Team Gallery plugin for... |
| CVE-2024-1797 | HIGH | 8.8 | 0.6% | May 2, 2024 | The WP ULike – Most Advanced WordPress Marketing Toolkit plugin for WordPress is vulnerable to SQL Injection via the 'st... |
| CVE-2024-1677 | HIGH | 8.8 | 0.5% | May 2, 2024 | The Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce plugin for WordPress is ... |
| CVE-2024-1173 | HIGH | 7.2 | 0.8% | May 2, 2024 | The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is... |
| CVE-2024-33530 | HIGH | 7.5 | 0.7% | May 2, 2024 | In Jitsi Meet before 9391, a logic flaw in password-protected Jitsi meetings (that make use of a lobby) leads to the dis... |
| CVE-2024-31964 | HIGH | 7.5 | 0.6% | May 2, 2024 | A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.... |
| CVE-2024-29309 | HIGH | 7.7 | 0.7% | May 2, 2024 | An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Ser... |
| CVE-2024-3544 | HIGH | 7.5 | 0.4% | May 2, 2024 | Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to t... |
| CVE-2024-3543 | HIGH | 7.5 | 0.3% | May 2, 2024 | Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be ea... |
| CVE-2024-34145 | HIGH | 8.8 | 1.0% | May 2, 2024 | A sandbox bypass vulnerability involving sandbox-defined classes that shadow specific non-sandbox-defined classes in Jen... |
| CVE-2024-33303 | HIGH | 8.2 | 0.5% | May 2, 2024 | SourceCodester Product Show Room 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" under Add Users. |
| CVE-2024-30251 | HIGH | 7.5 | 1.1% | May 2, 2024 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can sen... |
| CVE-2024-23462 | HIGH | 7.5 | 0.2% | May 2, 2024 | An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of se... |
| CVE-2024-33911 | HIGH | 7.2 | 1.1% | May 2, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Ma... |
| CVE-2024-32114 | HIGH | 8.8 | 6.9% | May 2, 2024 | In Apache ActiveMQ 6.x, the default configuration doesn't secure the API web context (where the Jolokia JMX REST API and... |
| CVE-2024-3476 | HIGH | 8.8 | 0.4% | May 2, 2024 | The Side Menu Lite WordPress plugin before 4.2.1 does not have CSRF checks in some bulk actions, which could allow atta... |
| CVE-2024-3475 | HIGH | 7.5 | 0.3% | May 2, 2024 | The Sticky Buttons WordPress plugin before 3.2.4 does not have CSRF checks in some bulk actions, which could allow atta... |
| CVE-2024-3474 | HIGH | 8.8 | 0.4% | May 2, 2024 | The Wow Skype Buttons WordPress plugin before 4.0.4 does not have CSRF checks in some bulk actions, which could allow at... |
| CVE-2024-33423 | HIGH | 7.4 | 0.6% | May 1, 2024 | Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary we... |
| CVE-2024-33306 | HIGH | 7.4 | 0.7% | May 1, 2024 | SourceCodester Laboratory Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via "First Name" parameter i... |
| CVE-2024-33430 | HIGH | 8.8 | 1.4% | May 1, 2024 | An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code ... |
| CVE-2024-33429 | HIGH | 7.1 | 1.1% | May 1, 2024 | Buffer-Overflow vulnerability at pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary cod... |
| CVE-2024-33428 | HIGH | 8.8 | 1.2% | May 1, 2024 | Buffer-Overflow vulnerability at conv.c:68 of stsaz phiola v2.0-rc22 allows a remote attacker to execute arbitrary code ... |
| CVE-2024-33300 | HIGH | 7.3 | 0.6% | May 1, 2024 | Typora v1.0.0 through v1.7 version (below) Markdown editor has a cross-site scripting (XSS) vulnerability, which allows ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now