2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30210 | HIGH | 7.4 | 0.3% | Apr 12, 2024 | IO-1020 Micro ELD uses a default WIFI password that could allow an adjacent attacker to connect to the device. |
| CVE-2024-3690 | HIGH | 8.8 | 1.3% | Apr 12, 2024 | A vulnerability classified as critical was found in PHPGurukul Small CRM 3.0. Affected by this vulnerability is an unkno... |
| CVE-2024-30405 | HIGH | 8.7 | 0.6% | Apr 12, 2024 | An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 li... |
| CVE-2024-30395 | HIGH | 8.7 | 0.5% | Apr 12, 2024 | An Improper Validation of Specified Type of Input vulnerability in Routing Protocol Daemon (RPD) of Junos OS and Junos O... |
| CVE-2024-30394 | HIGH | 8.7 | 0.7% | Apr 12, 2024 | A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evol... |
| CVE-2024-30381 | HIGH | 8.4 | 0.5% | Apr 12, 2024 | An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Juniper Networks Paragon Active Assurance... |
| CVE-2024-21618 | HIGH | 7.1 | 0.3% | Apr 12, 2024 | An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Junipe... |
| CVE-2024-21609 | HIGH | 7.1 | 0.3% | Apr 12, 2024 | A Missing Release of Memory after Effective Lifetime vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS... |
| CVE-2024-21605 | HIGH | 7.1 | 0.3% | Apr 12, 2024 | An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS... |
| CVE-2024-21598 | HIGH | 8.7 | 0.6% | Apr 12, 2024 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper N... |
| CVE-2024-21593 | HIGH | 7.1 | 0.3% | Apr 12, 2024 | An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N... |
| CVE-2024-3706 | HIGH | 7.5 | 0.5% | Apr 12, 2024 | Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an attacker... |
| CVE-2024-3705 | HIGH | 8.8 | 0.8% | Apr 12, 2024 | Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto). This vulnerability allows an atta... |
| CVE-2024-3686 | HIGH | 7.5 | 0.9% | Apr 12, 2024 | A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is ... |
| CVE-2024-31363 | HIGH | 8.8 | 0.3% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in LifterLMS.This issue affects LifterLMS: from n/a through 7.5.0. |
| CVE-2024-31362 | HIGH | 8.8 | 0.2% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a throu... |
| CVE-2024-31301 | HIGH | 8.8 | 0.2% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG.This issue affects Mul... |
| CVE-2024-31293 | HIGH | 8.8 | 0.2% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Easy Digital Downloads.This issue affects Easy Digital Downloads: fro... |
| CVE-2024-31269 | HIGH | 8.8 | 0.2% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps.This issue affects Easy Google Maps: from ... |
| CVE-2024-31268 | HIGH | 8.8 | 0.3% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in AppPresser Team AppPresser.This issue affects AppPresser: from n/a th... |
| CVE-2024-31238 | HIGH | 8.8 | 0.2% | Apr 12, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online... |
| CVE-2024-25545 | HIGH | 7.8 | 0.2% | Apr 12, 2024 | An issue in Weave Weave Desktop v.7.78.10 allows a local attacker to execute arbitrary code via a crafted script to the ... |
| CVE-2024-3211 | HIGH | 8.8 | 0.6% | Apr 12, 2024 | The Shopping Cart & eCommerce Store plugin for WordPress is vulnerable to SQL Injection via the 'productid' attribute of... |
| CVE-2024-3054 | HIGH | 7.2 | 41.5% | Apr 12, 2024 | WPvivid Backup & Migration Plugin for WordPress is vulnerable to PHAR Deserialization in all versions up to, and includi... |
| CVE-2024-29400 | HIGH | 7.5 | 0.6% | Apr 12, 2024 | An issue was discovered in RuoYi v4.5.1, allows attackers to obtain sensitive information via the status parameter. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now