2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-4375 | MEDIUM | 5.4 | 0.3% | Jun 18, 2024 | The Master Slider – Responsive Touch Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl... |
| CVE-2024-1634 | MEDIUM | 6.5 | 0.4% | Jun 18, 2024 | The Scheduling Plugin – Online Booking for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due... |
| CVE-2024-0845 | MEDIUM | 5.4 | 0.3% | Jun 18, 2024 | The PDF Viewer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the render function i... |
| CVE-2024-6082 | MEDIUM | 6.1 | 0.4% | Jun 17, 2024 | A vulnerability, which was classified as problematic, has been found in PHPVibe 11.0.46. This issue affects some unknown... |
| CVE-2024-6064 | MEDIUM | 5.5 | 0.3% | Jun 17, 2024 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerabil... |
| CVE-2024-6063 | MEDIUM | 5.5 | 0.3% | Jun 17, 2024 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been classified as problematic. This affects ... |
| CVE-2024-37828 | MEDIUM | 4.8 | 0.2% | Jun 17, 2024 | A stored cross-site scripting (XSS) in Vermeg Agile Reporter v23.2.1 allows attackers to execute arbitrary web scripts o... |
| CVE-2024-37798 | MEDIUM | 5.9 | 0.3% | Jun 17, 2024 | Cross-site scripting (XSS) vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Manag... |
| CVE-2024-6062 | MEDIUM | 5.5 | 0.3% | Jun 17, 2024 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this issue... |
| CVE-2024-6061 | MEDIUM | 5.5 | 0.4% | Jun 17, 2024 | A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this ... |
| CVE-2024-37895 | MEDIUM | 5.7 | 0.5% | Jun 17, 2024 | Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully authenticate th... |
| CVE-2024-37893 | MEDIUM | 5.9 | 0.6% | Jun 17, 2024 | Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OA... |
| CVE-2024-37891 | MEDIUM | 6.5 | 1.1% | Jun 17, 2024 | urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with `ProxyManager`, the ... |
| CVE-2024-6059 | MEDIUM | 4.8 | 0.4% | Jun 17, 2024 | A vulnerability, which was classified as problematic, has been found in Ingenico Estate Manager 2023. This issue affects... |
| CVE-2024-6058 | MEDIUM | 6.1 | 0.4% | Jun 17, 2024 | A vulnerability classified as problematic has been found in LabVantage LIMS 2017. This affects an unknown part of the fi... |
| CVE-2024-6056 | MEDIUM | 5.3 | 0.7% | Jun 17, 2024 | A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this ... |
| CVE-2024-37664 | MEDIUM | 5.2 | 0.4% | Jun 17, 2024 | Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can ... |
| CVE-2024-37663 | MEDIUM | 4.1 | 0.3% | Jun 17, 2024 | Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the vic... |
| CVE-2024-37662 | MEDIUM | 6.3 | 0.4% | Jun 17, 2024 | TP-LINK TL-7DR5130 v1.0.23 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can... |
| CVE-2024-37661 | MEDIUM | 6.3 | 0.3% | Jun 17, 2024 | TP-LINK TL-7DR5130 v1.0.23 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the vi... |
| CVE-2024-36527 | MEDIUM | 6.5 | 2.6% | Jun 17, 2024 | puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter usin... |
| CVE-2024-36578 | MEDIUM | 5.9 | 0.2% | Jun 17, 2024 | akbr update 1.0.0 is vulnerable to Prototype Pollution via update/index.js. |
| CVE-2024-36574 | MEDIUM | 6.3 | 0.4% | Jun 17, 2024 | A Prototype Pollution issue in flatten-json 1.0.1 allows an attacker to execute arbitrary code via module.exports.unflat... |
| CVE-2024-38470 | MEDIUM | 6.1 | 0.3% | Jun 17, 2024 | zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search par... |
| CVE-2024-38469 | MEDIUM | 6.3 | 0.3% | Jun 17, 2024 | zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search par... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now