2024 CVE Vulnerabilities
39,236 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-9384 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Quantity Dynamic Pricing & Bulk Discounts for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site... |
| CVE-2024-9375 | MEDIUM | 6.1 | 0.3% | Oct 4, 2024 | The WordPress Captcha Plugin by Captcha Bank plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to... |
| CVE-2024-9372 | MEDIUM | 5.4 | 0.2% | Oct 4, 2024 | The WP Blocks Hub plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions... |
| CVE-2024-9368 | MEDIUM | 5.4 | 0.2% | Oct 4, 2024 | The Aggregator Advanced Settings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads ... |
| CVE-2024-9353 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Popularis Extra plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg... |
| CVE-2024-9349 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Sc... |
| CVE-2024-9345 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Product Delivery Date for WooCommerce – Lite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting du... |
| CVE-2024-9237 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Fish and Ships – Most flexible shipping table rate. A WooCommerce shipping rate plugin for WordPress is vulnerable t... |
| CVE-2024-9204 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Smart Custom 404 Error Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER['REQUE... |
| CVE-2024-8802 | MEDIUM | 6.1 | 0.4% | Oct 4, 2024 | The Clio Grow plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg witho... |
| CVE-2024-8520 | MEDIUM | 4.3 | 0.3% | Oct 4, 2024 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2024-8519 | MEDIUM | 5.4 | 0.4% | Oct 4, 2024 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi... |
| CVE-2024-47850 | HIGH | 7.5 | 0.9% | Oct 4, 2024 | CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a sing... |
| CVE-2024-44207 | MEDIUM | 4.3 | 9.2% | Oct 4, 2024 | This issue was addressed with improved checks. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. Audio messages in Me... |
| CVE-2024-44204 | MEDIUM | 5.5 | 4.9% | Oct 4, 2024 | A logic issue was addressed with improved validation. This issue is fixed in iOS 18.0.1 and iPadOS 18.0.1. A user's save... |
| CVE-2024-45367 | CRITICAL | 9.3 | 0.5% | Oct 3, 2024 | The web server for ONS-S8 - Spectra Aggregation Switch includes an incomplete authentication process, which can lead to ... |
| CVE-2024-43699 | CRITICAL | 9.8 | 0.5% | Oct 3, 2024 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script AM_RegReport.aspx. An unauthenticated attac... |
| CVE-2024-42417 | HIGH | 8.8 | 6.6% | Oct 3, 2024 | Delta Electronics DIAEnergie is vulnerable to an SQL injection in the script Handler_CFG.ashx. An authenticated attacker... |
| CVE-2024-41925 | CRITICAL | 9.8 | 0.7% | Oct 3, 2024 | The web service for ONS-S8 - Spectra Aggregation Switch includes functions which do not properly validate user input, al... |
| CVE-2024-46658 | HIGH | 8 | 23.1% | Oct 3, 2024 | Syrotech SY-GOPON-8OLT-L3 v1.6.0_240629 was discovered to contain an authenticated command injection vulnerability. |
| CVE-2024-9266 | MEDIUM | 4.7 | 0.4% | Oct 3, 2024 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Express. This vulnerability affects the use of the ... |
| CVE-2024-41596 | HIGH | 8 | 0.3% | Oct 3, 2024 | Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because o... |
| CVE-2024-41595 | HIGH | 8 | 0.3% | Oct 3, 2024 | DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cg... |
| CVE-2024-41594 | HIGH | 7.5 | 0.3% | Oct 3, 2024 | An issue in DrayTek Vigor310 devices through 4.3.2.6 allows an attacker to obtain sensitive information because the http... |
| CVE-2024-41593 | CRITICAL | 9.8 | 0.9% | Oct 3, 2024 | DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_d... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now