2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-52612 | MEDIUM | 4.8 | 0.5% | Feb 11, 2025 | SolarWinds Platform is vulnerable to a reflected cross-site scripting vulnerability. This was caused by an insufficient ... |
| CVE-2024-45718 | MEDIUM | 4.6 | 0.2% | Feb 11, 2025 | Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a l... |
| CVE-2024-28989 | MEDIUM | 5.5 | 0.3% | Feb 11, 2025 | SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive in... |
| CVE-2024-13570 | MEDIUM | 6.1 | 0.6% | Feb 11, 2025 | The Stray Random Quotes WordPress plugin through 1.9.9 does not sanitise and escape a parameter before outputting it bac... |
| CVE-2024-13544 | MEDIUM | 4.8 | 0.3% | Feb 11, 2025 | The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privile... |
| CVE-2024-13543 | MEDIUM | 6.1 | 0.6% | Feb 11, 2025 | The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it ba... |
| CVE-2024-12599 | MEDIUM | 6.4 | 0.3% | Feb 11, 2025 | The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl... |
| CVE-2024-57178 | MEDIUM | 5.9 | 0.2% | Feb 10, 2025 | An SQL injection vulnerability exists in Stock-Forecaster <=01-04-2020. By sending a specially crafted 'stock-symbol' pa... |
| CVE-2024-54658 | MEDIUM | 6.5 | 0.5% | Feb 10, 2025 | The issue was addressed with improved memory handling. This issue is fixed in Safari 17.4, iOS 17.4 and iPadOS 17.4, mac... |
| CVE-2024-46437 | MEDIUM | 6.5 | 1.1% | Feb 10, 2025 | A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unau... |
| CVE-2024-46430 | MEDIUM | 6.5 | 0.8% | Feb 10, 2025 | Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web manageme... |
| CVE-2024-42513 | MEDIUM | 5.3 | 0.5% | Feb 10, 2025 | Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application... |
| CVE-2024-13010 | MEDIUM | 6.1 | 0.3% | Feb 10, 2025 | The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including,... |
| CVE-2024-10649 | MEDIUM | 6.1 | 0.3% | Feb 10, 2025 | wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpo... |
| CVE-2024-57409 | MEDIUM | 4.8 | 0.3% | Feb 10, 2025 | A stored cross-site scripting (XSS) vulnerability in the Parameter List module of cool-admin-java v1.0 allows attackers ... |
| CVE-2024-48170 | MEDIUM | 5.4 | 0.2% | Feb 10, 2025 | PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload injected into the name in the... |
| CVE-2024-57950 | MEDIUM | 5.5 | 0.2% | Feb 10, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize denominator defaults to... |
| CVE-2024-12243 | MEDIUM | 5.3 | 1.2% | Feb 10, 2025 | A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libta... |
| CVE-2024-12133 | MEDIUM | 5.3 | 1.0% | Feb 10, 2025 | A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements ... |
| CVE-2024-11831 | MEDIUM | 5.4 | 1.1% | Feb 10, 2025 | A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not ... |
| CVE-2024-8685 | MEDIUM | 4.3 | 0.4% | Feb 10, 2025 | Path-Traversal vulnerability in Revolution Pi version 2022-07-28-revpi-buster from KUNBUS GmbH. This vulnerability could... |
| CVE-2024-57949 | MEDIUM | 5.5 | 0.2% | Feb 9, 2025 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Don't enable interrupts in its_... |
| CVE-2024-54176 | MEDIUM | 6.5 | 0.3% | Feb 8, 2025 | IBM DevOps Deploy 8.0 through 8.0.1.4, 8.1 through 8.1.0.0 and IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 thro... |
| CVE-2024-13850 | MEDIUM | 4.8 | 0.3% | Feb 8, 2025 | The Simple add pages or posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, a... |
| CVE-2024-55630 | MEDIUM | 5.5 | 0.3% | Feb 7, 2025 | Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now