2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30462 | HIGH | 8.8 | 0.2% | Mar 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 HUSKY – Products Filter for WooCommerce (formerly WOOF).Th... |
| CVE-2024-30454 | HIGH | 8.8 | 0.2% | Mar 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in VeronaLabs WP SMS.This issue affects WP SMS: from n/a through 6.6.2. |
| CVE-2024-30449 | HIGH | 7.1 | 0.4% | Mar 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Activities... |
| CVE-2024-30447 | HIGH | 7.1 | 0.4% | Mar 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Solutions... |
| CVE-2024-25944 | HIGH | 7.5 | 0.8% | Mar 29, 2024 | Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability. An unauthenticated remote attacke... |
| CVE-2024-30645 | HIGH | 8 | 1.0% | Mar 29, 2024 | Tenda AC15V1.0 V15.03.20_multi has a command injection vulnerability via the deviceName parameter. |
| CVE-2024-30482 | HIGH | 8.8 | 0.2% | Mar 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Brice CAPOBIANCO Simple Revisions Delete.This issue affects Simple Re... |
| CVE-2024-30246 | HIGH | 7.1 | 0.6% | Mar 29, 2024 | Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could ... |
| CVE-2024-29904 | HIGH | 7.5 | 0.8% | Mar 29, 2024 | CodeIgniter is a PHP full-stack web framework A vulnerability was found in the Language class that allowed DoS attacks. ... |
| CVE-2024-29901 | HIGH | 8.1 | 0.7% | Mar 29, 2024 | The AuthKit library for Next.js provides helpers for authentication and session management using WorkOS & AuthKit with N... |
| CVE-2024-29900 | HIGH | 7.5 | 0.6% | Mar 29, 2024 | Electron Packager bundles Electron-based application source code with a renamed Electron executable and supporting files... |
| CVE-2024-29686 | HIGH | 7.2 | 1.8% | Mar 29, 2024 | Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary ... |
| CVE-2024-30506 | HIGH | 7.1 | 0.4% | Mar 29, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vsourz Digital All... |
| CVE-2024-30504 | HIGH | 7.2 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel Engine.T... |
| CVE-2024-29890 | HIGH | 8.8 | 0.8% | Mar 29, 2024 | DataLens is a business intelligence and data visualization system. A specifically crafted request allowed the creation o... |
| CVE-2024-28867 | HIGH | 7.4 | 0.6% | Mar 29, 2024 | Swift Prometheus is a Swift client for the Prometheus monitoring system, supporting counters, gauges and histograms. In ... |
| CVE-2024-28405 | HIGH | 7.2 | 0.8% | Mar 29, 2024 | SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin ... |
| CVE-2024-27619 | HIGH | 7.3 | 1.0% | Mar 29, 2024 | Dlink Dir-3040us A1 1.20b03a hotfix is vulnerable to Buffer Overflow. Any user having read/write access to ftp server ca... |
| CVE-2024-23537 | HIGH | 8.8 | 1.1% | Mar 29, 2024 | Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5. Users are re... |
| CVE-2024-30637 | HIGH | 8.8 | 1.8% | Mar 29, 2024 | Tenda F1202 v1.2.0.20(408) has a command injection vulnerablility in the formWriteFacMac function in the mac parameter. |
| CVE-2024-30634 | HIGH | 8 | 0.7% | Mar 29, 2024 | Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the mitInterface parameter in the fromAddressNat funct... |
| CVE-2024-30501 | HIGH | 7.2 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPChill Download M... |
| CVE-2024-30500 | HIGH | 8.8 | 0.6% | Mar 29, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in CubeWP CubeWP – All-in-One Dynamic Content Framework.Th... |
| CVE-2024-30499 | HIGH | 8.8 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CRM Perks CRM Perk... |
| CVE-2024-30497 | HIGH | 8.8 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in I Thirteen Web Sol... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now