2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-38539 | MEDIUM | 5.5 | 0.2% | Jun 19, 2024 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix kmemleak in rdma_core observed during... |
| CVE-2024-23443 | MEDIUM | 4.9 | 1.8% | Jun 19, 2024 | A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a... |
| CVE-2024-35765 | MEDIUM | 5.4 | 0.3% | Jun 19, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wpsoul Gree... |
| CVE-2024-5676 | MEDIUM | 6.8 | 0.3% | Jun 19, 2024 | The Paradox IP150 Internet Module in version 1.40.00 is vulnerable to Cross-Site Request Forgery (CSRF) attacks due to a... |
| CVE-2024-4632 | MEDIUM | 6.4 | 0.4% | Jun 19, 2024 | The WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce plugin for WordPr... |
| CVE-2024-0383 | MEDIUM | 5.4 | 0.4% | Jun 19, 2024 | The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's [wprm-recipe-inst... |
| CVE-2024-0789 | MEDIUM | 5.3 | 0.3% | Jun 19, 2024 | The WP Maintenance plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 6.1.9... |
| CVE-2024-3894 | MEDIUM | 6.4 | 0.3% | Jun 19, 2024 | The Photo Gallery, Images, Slider in Rbs Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting... |
| CVE-2024-37881 | MEDIUM | 5.3 | 1.2% | Jun 19, 2024 | SiteGuard WP Plugin provides a functionality to customize the path to the login page wp-login.php and implements a measu... |
| CVE-2024-37387 | MEDIUM | 4 | 0.2% | Jun 19, 2024 | Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited,... |
| CVE-2024-36252 | MEDIUM | 6.3 | 0.2% | Jun 19, 2024 | Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.... |
| CVE-2024-1407 | MEDIUM | 5.4 | 0.2% | Jun 19, 2024 | The Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions plugin for WordPress is vulnerab... |
| CVE-2024-5208 | MEDIUM | 6.5 | 0.6% | Jun 19, 2024 | An uncontrolled resource consumption vulnerability exists in the `upload-link` endpoint of mintplex-labs/anything-llm. T... |
| CVE-2024-35298 | MEDIUM | 4.3 | 0.3% | Jun 19, 2024 | Improper authorization in handler for custom URL scheme issue in 'ZOZOTOWN' App for Android versions prior to 7.39.6 all... |
| CVE-2024-5768 | MEDIUM | 6.4 | 0.2% | Jun 19, 2024 | The MIMO Woocommerce Order Tracking plugin for WordPress is vulnerable to unauthorized modification of data due to a mis... |
| CVE-2024-4873 | MEDIUM | 4.3 | 0.3% | Jun 19, 2024 | The Replace Image plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and incl... |
| CVE-2024-4787 | MEDIUM | 5.8 | 0.3% | Jun 19, 2024 | The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, ... |
| CVE-2024-4663 | MEDIUM | 6.4 | 0.4% | Jun 19, 2024 | The OSM Map Widget for Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ param... |
| CVE-2024-4623 | MEDIUM | 6.4 | 0.3% | Jun 19, 2024 | The Blogmentor – Blog Layouts for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘p... |
| CVE-2024-4541 | MEDIUM | 4.3 | 0.2% | Jun 19, 2024 | The Custom Product List Table plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, an... |
| CVE-2024-4450 | MEDIUM | 6.3 | 0.3% | Jun 19, 2024 | The AliExpress Dropshipping with AliNext Lite plugin for WordPress is vulnerable to unauthorized access due to a missing... |
| CVE-2024-3984 | MEDIUM | 6.4 | 0.3% | Jun 19, 2024 | The EmbedSocial – Social Media Feeds, Reviews and Galleries plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
| CVE-2024-5970 | MEDIUM | 6.4 | 0.3% | Jun 18, 2024 | The MaxGalleria plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's maxgallery_thumb shor... |
| CVE-2024-6128 | MEDIUM | 5.3 | 0.5% | Jun 18, 2024 | A vulnerability, which was classified as problematic, has been found in spa-cartcms 1.9.0.6. This issue affects some unk... |
| CVE-2024-38277 | MEDIUM | 5.4 | 0.2% | Jun 18, 2024 | A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used inte... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now