2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-20320 | HIGH | 7.8 | 0.2% | Mar 13, 2024 | A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Conve... |
| CVE-2024-20318 | HIGH | 7.4 | 0.3% | Mar 13, 2024 | A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attac... |
| CVE-2024-0162 | HIGH | 8.8 | 0.2% | Mar 13, 2024 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulner... |
| CVE-2024-2194 | HIGH | 7.2 | 67.7% | Mar 13, 2024 | The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL search parameter in all ... |
| CVE-2024-2106 | HIGH | 7.5 | 0.8% | Mar 13, 2024 | The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Informatio... |
| CVE-2024-2006 | HIGH | 8.8 | 1.2% | Mar 13, 2024 | The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is v... |
| CVE-2024-28673 | HIGH | 8.8 | 0.4% | Mar 13, 2024 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/mychannel_edit.php. |
| CVE-2024-28671 | HIGH | 8.8 | 0.9% | Mar 13, 2024 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/stepselect_main.php. |
| CVE-2024-26630 | HIGH | 7.1 | 0.3% | Mar 13, 2024 | In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix folio read-after-free in cache w... |
| CVE-2024-24549 | HIGH | 7.5 | 23.1% | Mar 13, 2024 | Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing a... |
| CVE-2024-1951 | HIGH | 7.5 | 1.0% | Mar 13, 2024 | The Logo Showcase Ultimate – Logo Carousel, Logo Slider & Logo Grid plugin for WordPress is vulnerable to PHP Object Inj... |
| CVE-2024-1950 | HIGH | 8.8 | 1.2% | Mar 13, 2024 | The Product Carousel Slider & Grid Ultimate for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection i... |
| CVE-2024-1793 | HIGH | 7.2 | 0.9% | Mar 13, 2024 | The AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth plugin fo... |
| CVE-2024-1772 | HIGH | 8.8 | 1.0% | Mar 13, 2024 | The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to PHP Object... |
| CVE-2024-1751 | HIGH | 8.8 | 3.1% | Mar 13, 2024 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to time-based SQL Injection via ... |
| CVE-2024-1536 | HIGH | 7.4 | 0.5% | Mar 13, 2024 | The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress... |
| CVE-2024-1505 | HIGH | 8.8 | 0.8% | Mar 13, 2024 | The Academy LMS – eLearning and online course solution for WordPress plugin for WordPress is vulnerable to privilege esc... |
| CVE-2024-1311 | HIGH | 8.8 | 1.5% | Mar 13, 2024 | The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio... |
| CVE-2024-1203 | HIGH | 8.8 | 0.8% | Mar 13, 2024 | The Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag Manager For WooCommerce plugin for WordPress... |
| CVE-2024-0683 | HIGH | 7.5 | 1.2% | Mar 13, 2024 | The Bulgarisation for WooCommerce plugin for WordPress is vulnerable to unauthorized access due to missing capability ch... |
| CVE-2024-0368 | HIGH | 8.6 | 0.8% | Mar 13, 2024 | The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to Sensitive Informatio... |
| CVE-2024-0161 | HIGH | 8.4 | 0.2% | Mar 13, 2024 | Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulner... |
| CVE-2024-28684 | HIGH | 8.8 | 0.3% | Mar 13, 2024 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/module_... |
| CVE-2024-28675 | HIGH | 8.8 | 0.3% | Mar 13, 2024 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_edit.php |
| CVE-2024-28665 | HIGH | 8.8 | 0.3% | Mar 13, 2024 | DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /dede/article... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now