2024 CVE Vulnerabilities
39,271 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-44185 | MEDIUM | 5.5 | 0.3% | Oct 24, 2024 | The issue was addressed with improved checks. This issue is fixed in Safari 17.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma... |
| CVE-2024-44141 | MEDIUM | 6.8 | 0.2% | Oct 24, 2024 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to... |
| CVE-2024-40810 | MEDIUM | 5.5 | 0.2% | Oct 24, 2024 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An ... |
| CVE-2024-10336 | CRITICAL | 9.8 | 0.6% | Oct 24, 2024 | A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue... |
| CVE-2024-10335 | CRITICAL | 9.8 | 0.7% | Oct 24, 2024 | A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. ... |
| CVE-2024-48538 | CRITICAL | 9.8 | 0.5% | Oct 24, 2024 | Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sen... |
| CVE-2024-45031 | MEDIUM | 6.1 | 0.6% | Oct 24, 2024 | When editing objects in the Syncope Console, incomplete HTML tags could be used to bypass HTML sanitization. This made i... |
| CVE-2024-49702 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal myCred ... |
| CVE-2024-49696 | MEDIUM | 4.8 | 0.3% | Oct 24, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robosoft Robo Gall... |
| CVE-2024-49695 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP ... |
| CVE-2024-49693 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kraft Plugins Mega... |
| CVE-2024-10332 | MEDIUM | 6.1 | 0.2% | Oct 24, 2024 | A Cross-Site Scripting vulnerability has been found in Janto v4.3r11 from Impronta. This vulnerability allows an attacke... |
| CVE-2024-10180 | MEDIUM | 5.4 | 0.3% | Oct 24, 2024 | The Contact Form 7 – Repeatable Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin'... |
| CVE-2024-8959 | MEDIUM | 6.4 | 0.4% | Oct 24, 2024 | The WP Adminify – Custom WordPress Dashboard, Login and Admin Customizer plugin for WordPress is vulnerable to Stored Cr... |
| CVE-2024-5608 | HIGH | 8.1 | 1.3% | Oct 24, 2024 | Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in the technician reports feature... |
| CVE-2024-49703 | MEDIUM | 6.5 | 0.2% | Oct 24, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in magepeopleteam WpE... |
| CVE-2024-49691 | HIGH | 7.6 | 0.4% | Oct 24, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW Plugins Produc... |
| CVE-2024-49683 | MEDIUM | 5.3 | 0.3% | Oct 24, 2024 | Missing Authorization vulnerability in Magazine3 Schema & Structured Data for WP & AMP schema-and-structured-data-for-wp... |
| CVE-2024-49682 | MEDIUM | 6.1 | 0.3% | Oct 24, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in wp.insider Simple Membership simple-membership allo... |
| CVE-2024-49681 | CRITICAL | 9.3 | 1.1% | Oct 24, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in activity-log.com W... |
| CVE-2024-9650 | MEDIUM | 5.4 | 0.4% | Oct 24, 2024 | The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tooltip’ parameter in all... |
| CVE-2024-9214 | MEDIUM | 6.1 | 0.4% | Oct 24, 2024 | The Extra Product Options Builder for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ... |
| CVE-2024-10331 | HIGH | 8.8 | 0.5% | Oct 24, 2024 | A vulnerability, which was classified as critical, has been found in PHPGurukul Vehicle Record System 1.0. This issue af... |
| CVE-2024-10176 | MEDIUM | 6.4 | 0.3% | Oct 24, 2024 | The Compact WP Audio Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sc_embe... |
| CVE-2024-8312 | MEDIUM | 5.4 | 0.5% | Oct 24, 2024 | An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 before 17.3.6, 17.4 before 17.4.3, and 17... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now