2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-21818 | MEDIUM | 6.7 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentia... |
| CVE-2024-21792 | MEDIUM | 4.7 | 0.1% | May 16, 2024 | Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authen... |
| CVE-2024-21774 | MEDIUM | 6.7 | 0.2% | May 16, 2024 | Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 ... |
| CVE-2024-4603 | MEDIUM | 5.3 | 1.1% | May 16, 2024 | Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use... |
| CVE-2024-35185 | MEDIUM | 5.3 | 0.5% | May 16, 2024 | Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to ... |
| CVE-2024-35176 | MEDIUM | 5.3 | 2.1% | May 16, 2024 | REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XM... |
| CVE-2024-34808 | MEDIUM | 4.3 | 0.4% | May 16, 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samuel Marshall JCH Opti... |
| CVE-2024-34805 | MEDIUM | 6.5 | 0.3% | May 16, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webvitaly i... |
| CVE-2024-34760 | MEDIUM | 6.5 | 0.3% | May 16, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPBlockart ... |
| CVE-2024-34751 | MEDIUM | 4.4 | 0.2% | May 16, 2024 | Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affe... |
| CVE-2024-34273 | MEDIUM | 5.9 | 0.5% | May 16, 2024 | njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method. |
| CVE-2024-34958 | MEDIUM | 6.5 | 0.4% | May 16, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=... |
| CVE-2024-34957 | MEDIUM | 5.4 | 0.2% | May 16, 2024 | idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mu... |
| CVE-2024-34582 | MEDIUM | 6.1 | 0.4% | May 16, 2024 | Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Passw... |
| CVE-2024-4760 | MEDIUM | 6.3 | 0.2% | May 16, 2024 | A voltage glitch during the startup of EEFC NVM controllers on Microchip SAM E70/S70/V70/V71, SAM G55, SAM 4C/4S/4N/4E, ... |
| CVE-2024-4993 | MEDIUM | 5.4 | 0.3% | May 16, 2024 | Vulnerability in SiAdmin 1.1 that allows XSS via the /show.php query parameter. This vulnerability could allow a remote ... |
| CVE-2024-4580 | MEDIUM | 5.4 | 0.3% | May 16, 2024 | The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vu... |
| CVE-2024-30287 | MEDIUM | 5.5 | 0.2% | May 16, 2024 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that co... |
| CVE-2024-30286 | MEDIUM | 5.5 | 0.2% | May 16, 2024 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that co... |
| CVE-2024-30283 | MEDIUM | 5.5 | 0.2% | May 16, 2024 | Adobe Framemaker versions 2020.5, 2022.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that co... |
| CVE-2024-4634 | MEDIUM | 5.4 | 0.4% | May 16, 2024 | The Elementor Header & Footer Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘hfe_svg... |
| CVE-2024-4617 | MEDIUM | 6.4 | 0.4% | May 16, 2024 | The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ ... |
| CVE-2024-4400 | MEDIUM | 5.4 | 0.3% | May 16, 2024 | The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plguin for WordPress is vulnerable to Stored Cross-S... |
| CVE-2024-4385 | MEDIUM | 5.4 | 0.3% | May 16, 2024 | The Envo Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up ... |
| CVE-2024-4288 | MEDIUM | 5.4 | 0.3% | May 16, 2024 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Sto... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now