2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-30496 | HIGH | 8.8 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BdThemes Element P... |
| CVE-2024-30495 | HIGH | 7.2 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Faboba Falang mult... |
| CVE-2024-30494 | HIGH | 7.6 | 0.5% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 沈唁 OSS Aliyun.This... |
| CVE-2024-30491 | HIGH | 8.8 | 32.0% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileG... |
| CVE-2024-30488 | HIGH | 8.8 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Katie Zotpress zot... |
| CVE-2024-30487 | HIGH | 7.6 | 0.5% | Mar 29, 2024 | Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar.This issue aff... |
| CVE-2024-30486 | HIGH | 8.8 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Max Foundry Media ... |
| CVE-2024-30478 | HIGH | 7.2 | 0.6% | Mar 29, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bulletin WordPress... |
| CVE-2024-30627 | HIGH | 8.8 | 0.8% | Mar 29, 2024 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the deviceId parameter from saveParentControlInfo funct... |
| CVE-2024-30626 | HIGH | 8 | 0.7% | Mar 29, 2024 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedEndTime parameter from setSchedWifi function. |
| CVE-2024-30625 | HIGH | 8 | 0.7% | Mar 29, 2024 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the entrys parameter from fromAddressNat function. |
| CVE-2024-30624 | HIGH | 8.8 | 0.7% | Mar 29, 2024 | Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function. |
| CVE-2024-30458 | HIGH | 8.8 | 0.2% | Mar 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WOOCS – WooCommerce Currency Switcher.This issue affects W... |
| CVE-2024-30457 | HIGH | 8.8 | 0.2% | Mar 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WordPress Meta Data and Taxonomies Filter (MDTF).This issu... |
| CVE-2024-30456 | HIGH | 8.8 | 0.2% | Mar 29, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in realmag777 WPCS.This issue affects WPCS: from n/a through 1.2.0.1. |
| CVE-2024-2848 | HIGH | 7.5 | 0.7% | Mar 29, 2024 | The Responsive theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2024-3061 | HIGH | 7.2 | 0.8% | Mar 29, 2024 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in a... |
| CVE-2024-1872 | HIGH | 8.8 | 0.9% | Mar 29, 2024 | The Button plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.1.27 via d... |
| CVE-2024-0913 | HIGH | 7.2 | 0.6% | Mar 29, 2024 | The WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress is... |
| CVE-2024-28960 | HIGH | 8.2 | 0.8% | Mar 29, 2024 | An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA C... |
| CVE-2024-28714 | HIGH | 8.1 | 0.8% | Mar 28, 2024 | SQL Injection vulnerability in CRMEB_Java e-commerce system v.1.3.4 allows an attacker to execute arbitrary code via the... |
| CVE-2024-23727 | HIGH | 8.4 | 0.5% | Mar 28, 2024 | The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker ... |
| CVE-2024-3019 | HIGH | 8.8 | 1.0% | Mar 28, 2024 | A flaw was found in PCP. The default pmproxy configuration exposes the Redis server backend to the local network, allowi... |
| CVE-2024-2947 | HIGH | 7.3 | 1.2% | Mar 28, 2024 | A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a comman... |
| CVE-2024-25963 | HIGH | 7.5 | 0.3% | Mar 28, 2024 | Dell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic algorithm vulnerability... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now