2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-22140 | HIGH | 8.8 | 0.3% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro... |
| CVE-2024-22136 | HIGH | 8.8 | 0.2% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in DroitThemes Droit Elementor Addons – Widgets, Blocks, Templates Libra... |
| CVE-2024-22304 | HIGH | 8.8 | 0.2% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Borbis Media FreshMail For WordPress.This issue affects FreshMail For... |
| CVE-2024-22291 | HIGH | 8.8 | 0.2% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Marco Milesi Browser Theme Color.This issue affects Browser Theme Col... |
| CVE-2024-22285 | HIGH | 8.8 | 0.2% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Elise Bosse Frontpage Manager.This issue affects Frontpage Manager: f... |
| CVE-2024-22143 | HIGH | 8.8 | 0.2% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in WP Spell Check.This issue affects WP Spell Check: from n/a through 9.... |
| CVE-2024-1086 | HIGH | 7.8 | 28.1% | Jan 31, 2024 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr... |
| CVE-2024-1085 | HIGH | 7.8 | 0.3% | Jan 31, 2024 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local pr... |
| CVE-2024-23507 | HIGH | 8.8 | 0.6% | Jan 31, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in InstaWP InstaWP Co... |
| CVE-2024-22305 | HIGH | 8.1 | 0.5% | Jan 31, 2024 | Authorization Bypass Through User-Controlled Key vulnerability in ali Forms Contact Form builder with drag & drop for Wo... |
| CVE-2024-22290 | HIGH | 8.8 | 0.2% | Jan 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in AboZain,O7abeeb,UnitOne Custom Dashboard Widgets allows Cross-Site Sc... |
| CVE-2024-1098 | HIGH | 7.5 | 1.2% | Jan 31, 2024 | A vulnerability was found in Rebuild up to 3.5.5 and classified as problematic. This issue affects the function QiniuClo... |
| CVE-2024-23775 | HIGH | 7.5 | 1.1% | Jan 31, 2024 | Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of... |
| CVE-2024-1069 | HIGH | 7.2 | 1.2% | Jan 31, 2024 | The Contact Form Entries plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validatio... |
| CVE-2024-1077 | HIGH | 8.8 | 0.9% | Jan 30, 2024 | Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap... |
| CVE-2024-1060 | HIGH | 8.8 | 0.9% | Jan 30, 2024 | Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap ... |
| CVE-2024-1059 | HIGH | 8.8 | 0.9% | Jan 30, 2024 | Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially expl... |
| CVE-2024-23838 | HIGH | 7.5 | 0.5% | Jan 30, 2024 | TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain con... |
| CVE-2024-23647 | HIGH | 8.8 | 0.5% | Jan 30, 2024 | Authentik is an open-source Identity Provider. There is a bug in our implementation of PKCE that allows an attacker to c... |
| CVE-2024-21649 | HIGH | 8.8 | 1.3% | Jan 30, 2024 | The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Mul... |
| CVE-2024-1019 | HIGH | 8.6 | 0.7% | Jan 30, 2024 | ModSecurity / libModSecurity 3.0.0 to 3.0.11 is affected by a WAF bypass for path-based payloads submitted via specially... |
| CVE-2024-1033 | HIGH | 7.5 | 0.6% | Jan 30, 2024 | A vulnerability, which was classified as problematic, has been found in openBI up to 1.0.8. Affected by this issue is th... |
| CVE-2024-0676 | HIGH | 7.1 | 0.1% | Jan 30, 2024 | Weak password requirement vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version , which allows a lo... |
| CVE-2024-0674 | HIGH | 7.8 | 0.1% | Jan 30, 2024 | Privilege escalation vulnerability in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, which could allow a local ... |
| CVE-2024-1063 | HIGH | 7.5 | 0.4% | Jan 30, 2024 | Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now