2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-32135 | HIGH | 7.6 | 0.5% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPZest Disable Com... |
| CVE-2024-32134 | HIGH | 7.6 | 0.5% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Forms t... |
| CVE-2024-32132 | HIGH | 7.6 | 0.5% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codeboxr Team CBX ... |
| CVE-2024-32127 | HIGH | 8.8 | 0.6% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Markus Seyer Find ... |
| CVE-2024-32125 | HIGH | 8.8 | 0.6% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booking Algorithms... |
| CVE-2024-32098 | HIGH | 7.6 | 0.5% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Page Visit Counter... |
| CVE-2024-32087 | HIGH | 7.2 | 0.6% | Apr 15, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ExportFeed.Com Pro... |
| CVE-2024-31093 | HIGH | 7.1 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Kaloyan K. Tsvetkov Broken Images allows Cross-Site Scripting (XSS).T... |
| CVE-2024-31086 | HIGH | 7.1 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Change default login logo,url and title allows Cross-Site S... |
| CVE-2024-30545 | HIGH | 7.1 | 0.2% | Apr 15, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Nick Powers Social Author Bio allows Stored XSS.This issue affects So... |
| CVE-2024-3771 | HIGH | 8.8 | 0.8% | Apr 15, 2024 | A vulnerability was found in PHPGurukul Student Record System 3.20 and classified as critical. Affected by this issue is... |
| CVE-2024-32488 | HIGH | 7.8 | 0.2% | Apr 15, 2024 | In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak p... |
| CVE-2024-2739 | HIGH | 8.7 | 0.3% | Apr 15, 2024 | The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers... |
| CVE-2024-1755 | HIGH | 8.8 | 0.4% | Apr 15, 2024 | The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to ... |
| CVE-2024-0399 | HIGH | 8.1 | 2.9% | Apr 15, 2024 | The WooCommerce Customers Manager WordPress plugin before 29.7 does not properly sanitise and escape a parameter before ... |
| CVE-2024-3778 | HIGH | 7.2 | 0.6% | Apr 15, 2024 | The file upload functionality of Ai3 QbiBot does not properly restrict types of uploaded files, allowing remote attacker... |
| CVE-2024-3775 | HIGH | 7.5 | 0.4% | Apr 15, 2024 | aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user inpu... |
| CVE-2024-3767 | HIGH | 8.8 | 0.8% | Apr 15, 2024 | A vulnerability classified as critical was found in PHPGurukul News Portal 4.1. This vulnerability affects unknown code ... |
| CVE-2024-1655 | HIGH | 8.8 | 2.0% | Apr 15, 2024 | Certain ASUS WiFi routers models has an OS Command Injection vulnerability, allowing an authenticated remote attacker to... |
| CVE-2024-3772 | HIGH | 7.5 | 0.9% | Apr 15, 2024 | Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service vi... |
| CVE-2024-29843 | HIGH | 7.5 | 0.5% | Apr 15, 2024 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr... |
| CVE-2024-29842 | HIGH | 7.5 | 0.5% | Apr 15, 2024 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr... |
| CVE-2024-29841 | HIGH | 7.5 | 0.5% | Apr 15, 2024 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr... |
| CVE-2024-29840 | HIGH | 7.5 | 0.5% | Apr 15, 2024 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr... |
| CVE-2024-29839 | HIGH | 7.5 | 0.5% | Apr 15, 2024 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access contr... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now