2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-31088 | MEDIUM | 6.5 | 0.2% | Jan 6, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPShop.Ru A... |
| CVE-2024-23511 | MEDIUM | 6.5 | 0.1% | Jan 5, 2026 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in POSIMYTH Th... |
| CVE-2024-55374 | MEDIUM | 5.3 | 0.3% | Jan 2, 2026 | REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts. |
| CVE-2024-42718 | MEDIUM | 6.5 | 0.6% | Dec 26, 2025 | A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially craft... |
| CVE-2024-29720 | MEDIUM | 5.5 | 0.2% | Dec 26, 2025 | An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to obtain sensitive information via... |
| CVE-2024-40317 | MEDIUM | 6.1 | 0.2% | Dec 24, 2025 | A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in... |
| CVE-2024-39037 | MEDIUM | 6.5 | 0.2% | Dec 24, 2025 | MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu paramete... |
| CVE-2024-35322 | MEDIUM | 6.1 | 0.2% | Dec 24, 2025 | MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro param... |
| CVE-2024-58335 | MEDIUM | 5 | 0.2% | Dec 24, 2025 | OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not... |
| CVE-2024-25812 | MEDIUM | 6.1 | 0.2% | Dec 22, 2025 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the src parameter. |
| CVE-2024-35321 | MEDIUM | 4.3 | 0.3% | Dec 22, 2025 | MyNET up to v26.08 was discovered to contain a Reflected cross-site scripting (XSS) vulnerability via the msgtipo parame... |
| CVE-2024-25814 | MEDIUM | 6.1 | 0.2% | Dec 22, 2025 | MyNET up to v26.05 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the msg parameter. |
| CVE-2024-58323 | MEDIUM | 5.4 | 0.1% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Ch... |
| CVE-2024-58322 | MEDIUM | 5.4 | 0.1% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping... |
| CVE-2024-58321 | MEDIUM | 5.4 | 0.1% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via form v... |
| CVE-2024-58320 | MEDIUM | 6.9 | 0.2% | Dec 18, 2025 | An information disclosure vulnerability in Kentico Xperience allows public users to access sensitive administration inte... |
| CVE-2024-58319 | MEDIUM | 6.1 | 0.2% | Dec 18, 2025 | A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the... |
| CVE-2024-58318 | MEDIUM | 6.1 | 0.1% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the ri... |
| CVE-2024-58317 | MEDIUM | 6.9 | 0.2% | Dec 18, 2025 | A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when sett... |
| CVE-2024-29370 | MEDIUM | 5.3 | 0.2% | Dec 17, 2025 | In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) c... |
| CVE-2024-58304 | MEDIUM | 6.1 | — | Dec 11, 2025 | SPA-CART CMS before 2.0.0 contains a stored cross-site scripting vulnerability in the product description parameter that... |
| CVE-2024-58302 | MEDIUM | 6.9 | 0.3% | Dec 11, 2025 | FoF Pretty Mail 1.1.2 contains a local file inclusion vulnerability that allows administrative users to include arbitrar... |
| CVE-2024-58297 | MEDIUM | 5.4 | 0.2% | Dec 11, 2025 | PyroCMS v3.0.1 contains a stored cross-site scripting vulnerability in the admin redirects configuration that allows att... |
| CVE-2024-58296 | MEDIUM | 5.3 | 0.4% | Dec 11, 2025 | CE Phoenix v3.0.1 contains a stored cross-site scripting vulnerability in the currencies administration panel that allow... |
| CVE-2024-58292 | MEDIUM | 5.3 | 0.4% | Dec 11, 2025 | XMB Forum 1.9.12.06 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now