2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-38661 | MEDIUM | 5.5 | 0.3% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: s390/ap: Fix crash in AP internal function modify_b... |
| CVE-2024-38385 | MEDIUM | 5.5 | 0.2% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: genirq/irqdesc: Prevent use-after-free in irq_find_... |
| CVE-2024-38306 | MEDIUM | 4.7 | 0.1% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: protect folio::private when attaching extent... |
| CVE-2024-37354 | MEDIUM | 4.7 | 0.2% | Jun 25, 2024 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix crash on racing fsync and size-extending... |
| CVE-2024-37087 | MEDIUM | 5.3 | 0.7% | Jun 25, 2024 | The vCenter Server contains a denial-of-service vulnerability. A malicious actor with network access to vCenter Server m... |
| CVE-2024-37086 | MEDIUM | 6.8 | 0.2% | Jun 25, 2024 | VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a v... |
| CVE-2024-5451 | MEDIUM | 6.4 | 0.3% | Jun 25, 2024 | The The7 — Website and eCommerce Builder for WordPress theme for WordPress is vulnerable to Stored Cross-Site Scripting ... |
| CVE-2024-38951 | MEDIUM | 6.5 | 0.5% | Jun 25, 2024 | A buffer overflow in PX4-Autopilot v1.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MavLink mes... |
| CVE-2024-32111 | MEDIUM | 5 | 0.4% | Jun 25, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Automattic WordPress all... |
| CVE-2024-6302 | MEDIUM | 5.5 | 0.3% | Jun 25, 2024 | Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to re... |
| CVE-2024-6300 | MEDIUM | 5.3 | 0.3% | Jun 25, 2024 | Incomplete cleanup when performing redactions in Conduit, allowing an attacker to check whether certain strings were pre... |
| CVE-2024-4846 | MEDIUM | 6.3 | 0.4% | Jun 25, 2024 | Authentication bypass in the 2FA feature in Devolutions Server 2024.1.14.0 and earlier allows an authenticated attacker ... |
| CVE-2024-31111 | MEDIUM | 6.5 | 0.3% | Jun 25, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic ... |
| CVE-2024-28832 | MEDIUM | 4.8 | 0.3% | Jun 25, 2024 | Stored XSS in the Crash Report page in Checkmk before versions 2.3.0p7, 2.2.0p28, 2.1.0p45, and 2.0.0 (EOL) allows users... |
| CVE-2024-28831 | MEDIUM | 5.4 | 0.3% | Jun 25, 2024 | Stored XSS in some confirmation pop-ups in Checkmk before versions 2.3.0p7 and 2.2.0p28 allows Checkmk users to execute ... |
| CVE-2024-6307 | MEDIUM | 6.4 | 0.5% | Jun 25, 2024 | WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to i... |
| CVE-2024-34142 | MEDIUM | 5.4 | 0.3% | Jun 25, 2024 | Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2024-34141 | MEDIUM | 5.4 | 0.3% | Jun 25, 2024 | Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
| CVE-2024-3249 | MEDIUM | 4.3 | 0.3% | Jun 25, 2024 | The Zita Elementor Site Library plugin for WordPress is vulnerable to unauthorized modification of data due to a missing... |
| CVE-2024-4759 | MEDIUM | 5.5 | 0.4% | Jun 25, 2024 | The Mime Types Extended WordPress plugin through 0.11 does not sanitise uploaded SVG files, which could allow users with... |
| CVE-2024-32855 | MEDIUM | 4.4 | 0.1% | Jun 25, 2024 | Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high pri... |
| CVE-2024-22385 | MEDIUM | 4.4 | 0.1% | Jun 25, 2024 | Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read an... |
| CVE-2024-22168 | MEDIUM | 5.9 | 0.3% | Jun 24, 2024 | A Cross-Site Scripting (XSS) vulnerability on the My Cloud, My Cloud Home, SanDisk ibi, and WD Cloud web apps was found ... |
| CVE-2024-38903 | MEDIUM | 4.1 | 0.4% | Jun 24, 2024 | H3C Magic R230 V100R002's udpserver opens port 9034, allowing attackers to execute arbitrary commands. |
| CVE-2024-38897 | MEDIUM | 5.3 | 0.4% | Jun 24, 2024 | WAVLINK WN551K1'live_check.shtml enables attackers to obtain sensitive router information. |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now