2024 CVE Vulnerabilities

39,268 CVEs published in 2024.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2024-31309HIGH7.5HTTP/2 CONTINUATION DoS attack can cause Apache Traffic Server to consume more resources on the server.  Version from 8....
CVE-2024-23076HIGH7.5JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator....
CVE-2024-20759HIGH8.1Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Script...
CVE-2024-2243HIGH8.8A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can us...
CVE-2024-22450HIGH7.8Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability. A l...
CVE-2024-3540HIGH8.8A vulnerability was found in Campcodes Church Management System 1.0. It has been rated as critical. Affected by this iss...
CVE-2024-3539HIGH8.8A vulnerability was found in Campcodes Church Management System 1.0. It has been declared as critical. Affected by this ...
CVE-2024-3538HIGH8.8A vulnerability was found in Campcodes Church Management System 1.0. It has been classified as critical. Affected is an ...
CVE-2024-3020HIGH7.2The plugin is vulnerable to PHP Object Injection in versions up to and including, 2.6.3 via deserialization of untrusted...
CVE-2024-3537HIGH8.8A vulnerability was found in Campcodes Church Management System 1.0 and classified as critical. This issue affects some ...
CVE-2024-3536HIGH8.8A vulnerability has been found in Campcodes Church Management System 1.0 and classified as critical. This vulnerability ...
CVE-2024-3523HIGH8.8A vulnerability classified as critical was found in Campcodes Online Event Management System 1.0. This vulnerability aff...
CVE-2024-3522HIGH8.8A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an u...
CVE-2024-3313HIGH8.6SUBNET Solutions Inc. has identified vulnerabilities in third-party components used in PowerSYSTEM Server 2021 and Subs...
CVE-2024-3446HIGH8.2A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the m...
CVE-2024-3213HIGH8.2The Relevanssi – A Better Search plugin for WordPress is vulnerable to unauthorized modification of data due to a missin...
CVE-2024-2871HIGH7.7The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode(s) in all ver...
CVE-2024-2693HIGH8.8The Link Whisper Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0...
CVE-2024-2501HIGH7.5The Hubbub Lite – Fast, Reliable Social Sharing Buttons plugin for WordPress is vulnerable to PHP Object Injection in al...
CVE-2024-2344HIGH7.2The Avada theme for WordPress is vulnerable to SQL Injection via the 'entry' parameter in all versions up to, and includ...
CVE-2024-2342HIGH8.8The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL...
CVE-2024-2125HIGH8.8The EnvíaloSimple: Email Marketing y Newsletters plugin for WordPress is vulnerable to Cross-Site Request Forgery in all...
CVE-2024-2112HIGH7.5The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Sensiti...
CVE-2024-2018HIGH8.8The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all ve...
CVE-2024-24245HIGH7.8An issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a local attacker to escalate...

Check if your code is affected by 2024 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now