2024 CVE Vulnerabilities
39,268 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-1991 | HIGH | 8.8 | 0.9% | Apr 9, 2024 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu... |
| CVE-2024-1990 | HIGH | 8.8 | 0.8% | Apr 9, 2024 | The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu... |
| CVE-2024-1934 | HIGH | 7.5 | 0.7% | Apr 9, 2024 | The WP Compress – Image Optimizer plugin for WordPress is vulnerable to unauthorized modification of data due to a missi... |
| CVE-2024-1893 | HIGH | 8.8 | 0.8% | Apr 9, 2024 | The Easy Property Listings plugin for WordPress is vulnerable to time-based SQL Injection via the ‘property_status’ shor... |
| CVE-2024-1812 | HIGH | 7.2 | 0.5% | Apr 9, 2024 | The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including... |
| CVE-2024-1792 | HIGH | 7.5 | 0.8% | Apr 9, 2024 | The CMB2 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.10.1 via des... |
| CVE-2024-1774 | HIGH | 7.2 | 0.5% | Apr 9, 2024 | The Customily Product Personalizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via user cookies in... |
| CVE-2024-1315 | HIGH | 8.8 | 0.5% | Apr 9, 2024 | The Classified Listing – Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to Cross-Site Req... |
| CVE-2024-1308 | HIGH | 7.5 | 0.7% | Apr 9, 2024 | The WooCommerce Cloak Affiliate Links plugin for WordPress is vulnerable to unauthorized modification of data due to a m... |
| CVE-2024-0952 | HIGH | 7.2 | 0.9% | Apr 9, 2024 | The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is... |
| CVE-2024-31507 | HIGH | 8.6 | 0.5% | Apr 9, 2024 | Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "request" parameter in admin/fe... |
| CVE-2024-31506 | HIGH | 7.5 | 0.7% | Apr 9, 2024 | Sourcecodester Online Graduate Tracer System v1.0 is vulnerable to SQL Injection via the "id" parameter in admin/admin_c... |
| CVE-2024-31457 | HIGH | 7.7 | 0.9% | Apr 9, 2024 | gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stac... |
| CVE-2024-25115 | HIGH | 7 | 0.4% | Apr 9, 2024 | RedisBloom adds a set of probabilistic data structures to Redis. Starting in version 2.0.0 and prior to version 2.4.7 an... |
| CVE-2024-24694 | HIGH | 7.8 | 0.2% | Apr 9, 2024 | Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an a... |
| CVE-2024-30262 | HIGH | 7.1 | 0.5% | Apr 9, 2024 | Contao is an open source content management system. Prior to version 4.13.40, when a frontend member changes their passw... |
| CVE-2024-29993 | HIGH | 8.8 | 2.0% | Apr 9, 2024 | Azure CycleCloud Elevation of Privilege Vulnerability |
| CVE-2024-29989 | HIGH | 8.4 | 0.7% | Apr 9, 2024 | Azure Monitor Agent Elevation of Privilege Vulnerability |
| CVE-2024-29988 | HIGH | 8.8 | 45.2% | Apr 9, 2024 | SmartScreen Prompt Security Feature Bypass Vulnerability |
| CVE-2024-29985 | HIGH | 8.8 | 2.4% | Apr 9, 2024 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-29984 | HIGH | 8.8 | 2.4% | Apr 9, 2024 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-29983 | HIGH | 8.8 | 2.4% | Apr 9, 2024 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-29982 | HIGH | 8.8 | 2.4% | Apr 9, 2024 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
| CVE-2024-29066 | HIGH | 7.2 | 1.3% | Apr 9, 2024 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
| CVE-2024-29062 | HIGH | 7.1 | 0.7% | Apr 9, 2024 | Secure Boot Security Feature Bypass Vulnerability |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now