2024 CVE Vulnerabilities
39,239 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-8471 | MEDIUM | 6.1 | 0.2% | Sep 5, 2024 | Cross-Site Scripting (XSS) vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of t... |
| CVE-2024-8470 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /j... |
| CVE-2024-8469 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobport... |
| CVE-2024-8468 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /job... |
| CVE-2024-8467 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobport... |
| CVE-2024-8466 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through CATEGORY parameter in /j... |
| CVE-2024-8465 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jo... |
| CVE-2024-8464 | HIGH | 7.5 | 0.5% | Sep 5, 2024 | SQL injection vulnerability, by which an attacker could send a specially designed query through JOBREGID parameter in /j... |
| CVE-2024-8463 | HIGH | 8.8 | 0.5% | Sep 5, 2024 | File upload restriction bypass vulnerability in PHPGurukul Job Portal 1.0, the exploitation of which could allow an auth... |
| CVE-2024-8462 | MEDIUM | 6.3 | 0.5% | Sep 5, 2024 | A vulnerability was found in Windmill 1.380.0. It has been classified as problematic. Affected is an unknown function of... |
| CVE-2024-8461 | MEDIUM | 5.3 | 1.9% | Sep 5, 2024 | A vulnerability, which was classified as problematic, was found in D-Link DNS-320 2.02b01. This affects an unknown part ... |
| CVE-2024-7884 | HIGH | 7.5 | 0.7% | Sep 5, 2024 | When a canister method is called via ic_cdk::call* , a new Future CallFuture is created and can be awaited by the calle... |
| CVE-2024-8460 | MEDIUM | 5.9 | 2.1% | Sep 5, 2024 | A vulnerability, which was classified as problematic, has been found in D-Link DNS-320 2.02b01. Affected by this issue i... |
| CVE-2024-7605 | MEDIUM | 4.3 | 0.4% | Sep 5, 2024 | The HelloAsso plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check ... |
| CVE-2024-7381 | MEDIUM | 5.3 | 0.3% | Sep 5, 2024 | The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing authorization a... |
| CVE-2024-7380 | MEDIUM | 4.3 | 0.3% | Sep 5, 2024 | The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing capability c... |
| CVE-2024-5957 | HIGH | 7.5 | 0.4% | Sep 5, 2024 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager. |
| CVE-2024-5956 | MEDIUM | 5.3 | 0.4% | Sep 5, 2024 | This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the ... |
| CVE-2024-6929 | MEDIUM | 5.4 | 0.3% | Sep 5, 2024 | The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ param... |
| CVE-2024-6894 | MEDIUM | 5.4 | 0.3% | Sep 5, 2024 | The RD Station plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5... |
| CVE-2024-6332 | MEDIUM | 6.5 | 0.4% | Sep 5, 2024 | The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unaut... |
| CVE-2024-8363 | MEDIUM | 5.4 | 0.4% | Sep 5, 2024 | The Share This Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's STI Buttons shor... |
| CVE-2024-5309 | MEDIUM | 5.4 | 0.3% | Sep 5, 2024 | The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data and modifi... |
| CVE-2024-45107 | MEDIUM | 5.5 | 0.3% | Sep 5, 2024 | Acrobat Reader versions 20.005.30636, 24.002.20964, 24.001.30123, 24.002.20991 and earlier are affected by a Use After F... |
| CVE-2024-6835 | MEDIUM | 5.3 | 0.5% | Sep 5, 2024 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now