2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9629 | MEDIUM | 5.4 | 0.4% | Oct 28, 2024 | The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data d... |
| CVE-2024-50469 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brightvesseldev Te... |
| CVE-2024-50468 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in faceleg Raptor Edi... |
| CVE-2024-50467 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in siteengineai Scrol... |
| CVE-2024-50464 | MEDIUM | 6.5 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lebedel Kod... |
| CVE-2024-50462 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in html5maps Interact... |
| CVE-2024-50461 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper EmbedP... |
| CVE-2024-50460 | MEDIUM | 4.8 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Firelight Fireligh... |
| CVE-2024-50458 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced... |
| CVE-2024-50451 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp... |
| CVE-2024-50449 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RedefiningTheWeb P... |
| CVE-2024-50448 | MEDIUM | 6.1 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITHEMES YITH WooC... |
| CVE-2024-50447 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EnvoThemes Envo's ... |
| CVE-2024-50446 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FuturioWP Futurio ... |
| CVE-2024-50445 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in merkulove Selectio... |
| CVE-2024-50441 | MEDIUM | 5.4 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Cozy Bl... |
| CVE-2024-50440 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chris Coyier CodeP... |
| CVE-2024-50439 | MEDIUM | 5.4 | 0.2% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force A... |
| CVE-2024-50438 | MEDIUM | 6.1 | 0.3% | Oct 28, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church ... |
| CVE-2024-6245 | HIGH | 7.4 | 0.2% | Oct 28, 2024 | Use of Default Credentials vulnerability in Maruti Suzuki SmartPlay on Linux (Infotainment Hub modules) allows attacker ... |
| CVE-2024-49771 | MEDIUM | 5.3 | 0.5% | Oct 28, 2024 | MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch f... |
| CVE-2024-47827 | MEDIUM | 4.8 | 0.3% | Oct 28, 2024 | Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Due to ... |
| CVE-2024-42028 | HIGH | 8.8 | 0.2% | Oct 28, 2024 | A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (V... |
| CVE-2024-10469 | MEDIUM | 6.5 | 0.2% | Oct 28, 2024 | VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users. |
| CVE-2024-49761 | HIGH | 7.5 | 1.4% | Oct 28, 2024 | REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has ma... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now