2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-5354 | MEDIUM | 6.5 | 0.6% | May 26, 2024 | A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1. This vulnerability affects unkno... |
| CVE-2024-30056 | MEDIUM | 5.4 | 1.6% | May 25, 2024 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
| CVE-2024-4045 | MEDIUM | 5.4 | 0.3% | May 25, 2024 | The Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation plugin for WordPr... |
| CVE-2024-5218 | MEDIUM | 6.4 | 0.4% | May 25, 2024 | The Reviews and Rating – Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin... |
| CVE-2024-5229 | MEDIUM | 6.4 | 0.3% | May 25, 2024 | The Primary Addon for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Prici... |
| CVE-2024-4858 | MEDIUM | 5.3 | 0.4% | May 25, 2024 | The Testimonial Carousel For Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a ... |
| CVE-2024-5220 | MEDIUM | 5.4 | 0.3% | May 25, 2024 | The ND Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's upload feature in a... |
| CVE-2024-36079 | MEDIUM | 6.5 | 0.6% | May 24, 2024 | An issue was discovered in Vaultize 21.07.27. When uploading files, there is no check that the filename parameter is cor... |
| CVE-2024-36049 | MEDIUM | 6.5 | 0.5% | May 24, 2024 | Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list ... |
| CVE-2024-34995 | MEDIUM | 4.3 | 0.3% | May 24, 2024 | svnWebUI v1.8.3 was discovered to contain an arbitrary file deletion vulnerability via the dirTemps parameter under com.... |
| CVE-2024-33809 | MEDIUM | 6.5 | 0.4% | May 24, 2024 | PingCAP TiDB v7.5.1 was discovered to contain a buffer overflow vulnerability, which could lead to database crashes and ... |
| CVE-2024-33470 | MEDIUM | 4.9 | 0.2% | May 24, 2024 | An issue in the SMTP Email Settings of AVTECH Room Alert 4E v4.4.0 allows attackers to gain access to credentials in pla... |
| CVE-2024-22588 | MEDIUM | 6.5 | 0.3% | May 24, 2024 | Kwik commit 745fd4e2 does not discard unused encryption keys. |
| CVE-2024-5273 | MEDIUM | 4.3 | 0.8% | May 24, 2024 | Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the workspace directory while serving rep... |
| CVE-2024-35595 | MEDIUM | 6.1 | 0.4% | May 24, 2024 | An arbitrary file upload vulnerability in the File Preview function of Xintongda OA v2023.12.30.1 allows attackers to ex... |
| CVE-2024-35593 | MEDIUM | 5.5 | 0.2% | May 24, 2024 | An arbitrary file upload vulnerability in the File preview function of Raingad IM v4.1.4 allows attackers to execute arb... |
| CVE-2024-35591 | MEDIUM | 5.4 | 0.4% | May 24, 2024 | An arbitrary file upload vulnerability in O2OA v8.3.8 allows attackers to execute arbitrary code via uploading a crafted... |
| CVE-2024-5318 | MEDIUM | 5.3 | 0.4% | May 24, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from ... |
| CVE-2024-5312 | MEDIUM | 6.3 | 0.3% | May 24, 2024 | PHP Server Monitor, version 3.2.0, is vulnerable to an XSS via the /phpservermon-3.2.0/vendor/phpmailer/phpmailer/test_s... |
| CVE-2024-4455 | MEDIUM | 6.1 | 1.0% | May 24, 2024 | The YITH WooCommerce Ajax Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘item’ parame... |
| CVE-2024-5310 | MEDIUM | 5.4 | 0.4% | May 24, 2024 | A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of th... |
| CVE-2024-4366 | MEDIUM | 5.4 | 0.3% | May 24, 2024 | The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bloc... |
| CVE-2024-5060 | MEDIUM | 5.4 | 0.4% | May 24, 2024 | The LottieFiles – JSON Based Animation Lottie & Bodymovin for Elementor plugin for WordPress is vulnerable to Stored Cro... |
| CVE-2024-4485 | MEDIUM | 5.4 | 0.3% | May 24, 2024 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre... |
| CVE-2024-4484 | MEDIUM | 5.4 | 0.7% | May 24, 2024 | The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPre... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now