2024 CVE Vulnerabilities
39,267 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5815 | MEDIUM | 6.5 | 0.3% | Jul 16, 2024 | A Cross-Site Request Forgery vulnerability in GitHub Enterprise Server allowed write operations on a victim-owned reposi... |
| CVE-2024-5795 | MEDIUM | 6.5 | 0.6% | Jul 16, 2024 | A Denial of Service vulnerability was identified in GitHub Enterprise Server that allowed an attacker to cause unbounded... |
| CVE-2024-5566 | MEDIUM | 6.5 | 0.5% | Jul 16, 2024 | An improper privilege management vulnerability allowed users to migrate private repositories without having appropriate ... |
| CVE-2024-40536 | MEDIUM | 5.3 | 0.4% | Jul 16, 2024 | Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code ... |
| CVE-2024-40503 | MEDIUM | 6.5 | 0.4% | Jul 16, 2024 | An issue in Tenda AX12 v.16.03.49.18_cn+ allows a remote attacker to cause a denial of service via the Routing functiona... |
| CVE-2024-39036 | MEDIUM | 6.5 | 0.6% | Jul 16, 2024 | SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php. |
| CVE-2024-39908 | MEDIUM | 4.3 | 1.5% | Jul 16, 2024 | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.1 has some DoS vulnerabilities when it parses an XML that ha... |
| CVE-2024-6326 | MEDIUM | 5.5 | 0.2% | Jul 16, 2024 | An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A mali... |
| CVE-2024-6325 | MEDIUM | 6.5 | 0.3% | Jul 16, 2024 | The v6.40 release of Rockwell Automation FactoryTalk® Policy Manager CVE-2021-22681 https://www.rockwellautomation.com/e... |
| CVE-2024-40626 | MEDIUM | 5.4 | 0.5% | Jul 16, 2024 | Outline is an open source, collaborative document editor. A type confusion issue was found in ProseMirror’s rendering pr... |
| CVE-2024-3232 | MEDIUM | 6.8 | 0.5% | Jul 16, 2024 | A formula injection vulnerability exists in Tenable Identity Exposure where an authenticated remote attacker with admini... |
| CVE-2024-6621 | MEDIUM | 4.3 | 0.4% | Jul 16, 2024 | The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauth... |
| CVE-2024-6579 | MEDIUM | 4.3 | 0.4% | Jul 16, 2024 | The Web and WooCommerce Addons for WPBakery Builder plugin for WordPress is vulnerable to unauthorized plugin settings m... |
| CVE-2024-6570 | MEDIUM | 5.3 | 0.5% | Jul 16, 2024 | The Glossary plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.26. Th... |
| CVE-2024-6565 | MEDIUM | 5.3 | 0.4% | Jul 16, 2024 | The AForms — Form Builder for Price Calculator & Cost Estimation plugin for WordPress is vulnerable to Full Path Disclos... |
| CVE-2024-5852 | MEDIUM | 4.3 | 0.7% | Jul 16, 2024 | The WordPress File Upload plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including... |
| CVE-2024-3779 | MEDIUM | 5.5 | 0.2% | Jul 16, 2024 | Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker t... |
| CVE-2024-3587 | MEDIUM | 5.4 | 0.4% | Jul 16, 2024 | The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the... |
| CVE-2024-2691 | MEDIUM | 5.4 | 0.3% | Jul 16, 2024 | The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable ... |
| CVE-2024-1937 | MEDIUM | 6.5 | 0.4% | Jul 16, 2024 | The Brizy – Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi... |
| CVE-2024-41008 | MEDIUM | 5.5 | 0.2% | Jul 16, 2024 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: change vm->task_info handling This pat... |
| CVE-2024-6559 | MEDIUM | 5.3 | 0.4% | Jul 16, 2024 | The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path ... |
| CVE-2024-4780 | MEDIUM | 6.4 | 0.5% | Jul 16, 2024 | The Image Hover Effects – Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘eih... |
| CVE-2024-6557 | MEDIUM | 5.3 | 0.4% | Jul 16, 2024 | The SchedulePress – Auto Post & Publish, Auto Social Share, Schedule Posts with Editorial Calendar & Missed Schedule Pos... |
| CVE-2024-4224 | MEDIUM | 5.4 | 0.3% | Jul 15, 2024 | An authenticated stored cross-site scripting (XSS) exists in the TP-Link TL-SG1016DE affecting version TL-SG1016DE(UN) V... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now