2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-4655 | MEDIUM | 5.4 | 0.4% | Jul 11, 2024 | The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options before outputt... |
| CVE-2024-6554 | MEDIUM | 5.3 | 0.5% | Jul 11, 2024 | The Branda – White Label WordPress, Custom Login Page Customizer plugin for WordPress is vulnerable to Full Path Disclos... |
| CVE-2024-0619 | MEDIUM | 5.3 | 0.4% | Jul 11, 2024 | The Payflex Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing cap... |
| CVE-2024-6210 | MEDIUM | 5.3 | 0.6% | Jul 11, 2024 | The Duplicator plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 1.5.9. T... |
| CVE-2024-23485 | MEDIUM | 4.6 | 0.2% | Jul 11, 2024 | Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the C... |
| CVE-2024-23317 | MEDIUM | 6.3 | 0.2% | Jul 11, 2024 | External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local ... |
| CVE-2024-22387 | MEDIUM | 6.8 | 0.3% | Jul 11, 2024 | External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface al... |
| CVE-2024-6650 | MEDIUM | 4.8 | 0.5% | Jul 10, 2024 | A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as problema... |
| CVE-2024-39561 | MEDIUM | 6.9 | 0.3% | Jul 10, 2024 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Jun... |
| CVE-2024-39513 | MEDIUM | 6.8 | 0.1% | Jul 10, 2024 | An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved al... |
| CVE-2024-39511 | MEDIUM | 6.8 | 0.1% | Jul 10, 2024 | An Improper Input Validation vulnerability in the 802.1X Authentication (dot1x) Daemon of Juniper Networks Junos OS allo... |
| CVE-2024-6150 | MEDIUM | 4.3 | 0.2% | Jul 10, 2024 | A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning |
| CVE-2024-6149 | MEDIUM | 6.1 | 0.2% | Jul 10, 2024 | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 |
| CVE-2024-38354 | MEDIUM | 6.1 | 0.4% | Jul 10, 2024 | CodiMD allows realtime collaborative markdown notes on all platforms. The notebook feature of Hackmd.io permits the rend... |
| CVE-2024-38353 | MEDIUM | 5.3 | 1.2% | Jul 10, 2024 | CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD before 2.5.4 is missing authentication and ... |
| CVE-2024-25076 | MEDIUM | 6.8 | 0.4% | Jul 10, 2024 | An issue was discovered on Renesas SmartBond DA14691, DA14695, DA14697, and DA14699 devices. The bootrom function respon... |
| CVE-2024-6649 | MEDIUM | 6.5 | 0.3% | Jul 10, 2024 | A vulnerability has been found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0 and classified as pro... |
| CVE-2024-5913 | MEDIUM | 6.8 | 0.2% | Jul 10, 2024 | An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to... |
| CVE-2024-5912 | MEDIUM | 6.8 | 0.1% | Jul 10, 2024 | An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR a... |
| CVE-2024-5911 | MEDIUM | 4.9 | 0.6% | Jul 10, 2024 | An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write admin... |
| CVE-2024-5492 | MEDIUM | 6.1 | 0.6% | Jul 10, 2024 | Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScale... |
| CVE-2024-37147 | MEDIUM | 4.3 | 0.7% | Jul 10, 2024 | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses track... |
| CVE-2024-27095 | MEDIUM | 4.8 | 0.3% | Jul 10, 2024 | Decidim is a participatory democracy framework. The admin panel is subject to potential XSS attach in case the attacker ... |
| CVE-2024-27090 | MEDIUM | 5.3 | 0.5% | Jul 10, 2024 | Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City go... |
| CVE-2024-6647 | MEDIUM | 5.1 | 0.5% | Jul 10, 2024 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Croogo up to 4.0.7. This affect... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now