2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-37625 | MEDIUM | 6.1 | 0.3% | Jun 17, 2024 | zhimengzhe iBarn v1.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the $search par... |
| CVE-2024-37624 | MEDIUM | 6.1 | 0.3% | Jun 17, 2024 | Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inpu... |
| CVE-2024-37623 | MEDIUM | 6.1 | 0.3% | Jun 17, 2024 | Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_k... |
| CVE-2024-37622 | MEDIUM | 6.1 | 0.3% | Jun 17, 2024 | Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter... |
| CVE-2024-37620 | MEDIUM | 6.1 | 0.3% | Jun 17, 2024 | PHPVOD v4.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the id parameter at /view... |
| CVE-2024-37619 | MEDIUM | 6.1 | 0.4% | Jun 17, 2024 | StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id par... |
| CVE-2024-37159 | MEDIUM | 6.5 | 0.3% | Jun 17, 2024 | Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a val... |
| CVE-2024-6055 | MEDIUM | 4.7 | 0.5% | Jun 17, 2024 | Improper removal of sensitive information in data source export feature in Devolutions Remote Desktop Manager 2024.1.32.... |
| CVE-2024-5741 | MEDIUM | 5.4 | 0.3% | Jun 17, 2024 | Stored XSS in inventory tree rendering in Checkmk before 2.3.0p7, 2.2.0p28, 2.1.0p45 and 2.0.0 (EOL) |
| CVE-2024-36289 | MEDIUM | 5.3 | 0.2% | Jun 17, 2024 | Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for An... |
| CVE-2024-36279 | MEDIUM | 5.3 | 0.1% | Jun 17, 2024 | Reliance on obfuscation or encryption of security-relevant inputs without integrity checking issue exists in "FreeFrom -... |
| CVE-2024-36277 | MEDIUM | 5.3 | 0.3% | Jun 17, 2024 | Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3... |
| CVE-2024-4305 | MEDIUM | 6.8 | 0.4% | Jun 17, 2024 | The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape som... |
| CVE-2024-3236 | MEDIUM | 5.4 | 0.3% | Jun 17, 2024 | The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which cou... |
| CVE-2024-6044 | MEDIUM | 6.5 | 0.4% | Jun 17, 2024 | Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same loc... |
| CVE-2024-38465 | MEDIUM | 5.3 | 0.3% | Jun 16, 2024 | Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of i... |
| CVE-2024-38460 | MEDIUM | 6.5 | 0.3% | Jun 16, 2024 | In SonarQube before 10.4 and 9.9.4 LTA, encrypted values generated using the Settings Encryption feature are potentially... |
| CVE-2024-38454 | MEDIUM | 6.1 | 0.3% | Jun 16, 2024 | ExpressionEngine before 7.4.11 allows XSS. |
| CVE-2024-38443 | MEDIUM | 6.2 | 0.2% | Jun 16, 2024 | C/sorting/binary_insertion_sort.c in The Algorithms - C through e5dad3f has a segmentation fault for deep recursion, whi... |
| CVE-2024-36397 | MEDIUM | 6.1 | 0.3% | Jun 16, 2024 | Vantiva - MediaAccess DGA2232 v19.4 - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site S... |
| CVE-2024-38394 | MEDIUM | 4.3 | 0.3% | Jun 16, 2024 | Mismatches in interpreting USB authorization policy between GNOME Settings Daemon (GSD) through 46.0 and the Linux kerne... |
| CVE-2024-5611 | MEDIUM | 6.4 | 0.3% | Jun 15, 2024 | The Stratum – Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘label_years’ ... |
| CVE-2024-5858 | MEDIUM | 4.3 | 0.3% | Jun 15, 2024 | The AI Infographic Maker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi... |
| CVE-2024-4095 | MEDIUM | 6.4 | 0.3% | Jun 15, 2024 | The Collapse-O-Matic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'expand' and 'ex... |
| CVE-2024-2695 | MEDIUM | 5.4 | 0.3% | Jun 15, 2024 | The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortco... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now