2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-24777 | HIGH | 8.8 | 7.0% | Oct 30, 2024 | A cross-site request forgery (CSRF) vulnerability exists in the Web Application functionality of the LevelOne WBR-6012 R... |
| CVE-2024-23309 | HIGH | 8.1 | 0.9% | Oct 30, 2024 | The LevelOne WBR-6012 router with firmware R0.40e6 has an authentication bypass vulnerability in its web application due... |
| CVE-2024-51304 | HIGH | 8.8 | 0.6% | Oct 30, 2024 | In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary comman... |
| CVE-2024-3935 | MEDIUM | 6.5 | 0.8% | Oct 30, 2024 | In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridg... |
| CVE-2024-10525 | CRITICAL | 9.8 | 57.9% | Oct 30, 2024 | In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no rea... |
| CVE-2024-9388 | MEDIUM | 5.4 | 0.3% | Oct 30, 2024 | The Black Widgets For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i... |
| CVE-2024-8512 | CRITICAL | 9.1 | 1.0% | Oct 30, 2024 | The W3SPEEDSTER plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.26 v... |
| CVE-2024-9632 | HIGH | 7.8 | 0.9% | Oct 30, 2024 | A flaw was found in the X.org server. Due to improperly tracked allocation size in _XkbSetCompatMap, a local attacker ma... |
| CVE-2024-50512 | MEDIUM | 5.3 | 0.3% | Oct 30, 2024 | Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows... |
| CVE-2024-50511 | CRITICAL | 9.9 | 0.5% | Oct 30, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in donimedia WP donimedia carousel wp-donimedia-carousel a... |
| CVE-2024-50510 | CRITICAL | 10 | 1.0% | Oct 30, 2024 | Unrestricted Upload of File with Dangerous Type vulnerability in webandprint AR For Woocommerce ar-for-woocommerce allow... |
| CVE-2024-50509 | HIGH | 8.6 | 1.3% | Oct 30, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommer... |
| CVE-2024-50508 | HIGH | 7.5 | 1.0% | Oct 30, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Chetan Khandla Woocommer... |
| CVE-2024-50507 | CRITICAL | 9.8 | 1.0% | Oct 30, 2024 | Deserialization of Untrusted Data vulnerability in Daschmi DS.DownloadList dsdownloadlist allows Object Injection.This i... |
| CVE-2024-50506 | HIGH | 8.8 | 0.4% | Oct 30, 2024 | Incorrect Privilege Assignment vulnerability in azexo Marketing Automation by AZEXO marketing-automation-by-azexo allows... |
| CVE-2024-50504 | HIGH | 8.8 | 0.5% | Oct 30, 2024 | Incorrect Privilege Assignment vulnerability in webxmedia Bulk Change Role bulk-role-change allows Privilege Escalation.... |
| CVE-2024-50503 | CRITICAL | 9.8 | 0.5% | Oct 30, 2024 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck User Toolkit user-toolkit allows Authen... |
| CVE-2024-8444 | MEDIUM | 5.4 | 0.3% | Oct 30, 2024 | The Download Manager WordPress plugin before 3.3.00 doesn't sanitize some of it's shortcode parameters, leading to cross... |
| CVE-2024-10223 | MEDIUM | 6.4 | 0.3% | Oct 30, 2024 | The WP Team – WordPress Team Member Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plu... |
| CVE-2024-10108 | HIGH | 7.2 | 0.4% | Oct 30, 2024 | The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ad... |
| CVE-2024-8871 | MEDIUM | 6.1 | 0.4% | Oct 30, 2024 | The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Reflected Cross-Site Scr... |
| CVE-2024-10399 | MEDIUM | 4.3 | 0.4% | Oct 30, 2024 | The Download Monitor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability... |
| CVE-2024-9886 | MEDIUM | 6.4 | 0.3% | Oct 30, 2024 | The WP Baidu Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'baidu_map' shortcod... |
| CVE-2024-9885 | MEDIUM | 6.4 | 0.3% | Oct 30, 2024 | The Widget or Sidebar Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'side... |
| CVE-2024-9884 | MEDIUM | 6.4 | 0.3% | Oct 30, 2024 | The T(-) Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tminus' shortcode... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now