2024 CVE Vulnerabilities
39,239 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-7418 | MEDIUM | 4.3 | 0.5% | Aug 29, 2024 | The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to ... |
| CVE-2024-7132 | MEDIUM | 4.8 | 0.4% | Aug 29, 2024 | The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of i... |
| CVE-2024-6927 | MEDIUM | 4.8 | 0.4% | Aug 29, 2024 | The Viral Signup WordPress plugin through 2.1 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2024-6551 | MEDIUM | 5.3 | 0.3% | Aug 29, 2024 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Full Path Disclosure in all ... |
| CVE-2024-5987 | MEDIUM | 4.3 | 0.3% | Aug 29, 2024 | The WP Accessibility Helper (WAH) plugin for WordPress is vulnerable to unauthorized modification of data due to a missi... |
| CVE-2024-5857 | MEDIUM | 5.3 | 0.3% | Aug 29, 2024 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms Free plugin for WordPress... |
| CVE-2024-5624 | MEDIUM | 6.1 | 0.2% | Aug 29, 2024 | Reflected Cross-Site Scripting (XSS) in Shift Logbook application of B&R APROL <= R 4.4-00P3 may allow a network-based a... |
| CVE-2024-5623 | HIGH | 7.8 | 0.2% | Aug 29, 2024 | An untrusted search path vulnerability in B&R APROL <= R 4.4-00P3 may be used by an authenticated local attacker to get ... |
| CVE-2024-5622 | HIGH | 7.8 | 0.2% | Aug 29, 2024 | An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL <= R 4.2.-07P3 and <= R 4.4-00P3 may... |
| CVE-2024-5417 | MEDIUM | 5.4 | 0.3% | Aug 29, 2024 | The Gutentor WordPress plugin before 3.3.6 does not validate and escape some of its block options before outputting the... |
| CVE-2024-4428 | CRITICAL | 9.8 | 0.5% | Aug 29, 2024 | Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Ma... |
| CVE-2024-45440 | MEDIUM | 5.3 | 9.3% | Aug 29, 2024 | core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash... |
| CVE-2024-43986 | MEDIUM | 4.8 | 0.3% | Aug 29, 2024 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople ... |
| CVE-2024-43700 | HIGH | 7.8 | 0.3% | Aug 29, 2024 | xfpt versions prior to 1.01 fails to handle appropriately some parameters inside the input data, resulting in a stack-ba... |
| CVE-2024-3944 | MEDIUM | 4.8 | 0.3% | Aug 29, 2024 | The WP To Do plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and in... |
| CVE-2024-38304 | MEDIUM | 6.5 | 0.1% | Aug 29, 2024 | Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of B... |
| CVE-2024-38303 | MEDIUM | 6 | 0.1% | Aug 29, 2024 | Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability.... |
| CVE-2024-29731 | CRITICAL | 9.8 | 0.4% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29730 | CRITICAL | 9.8 | 0.5% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29729 | CRITICAL | 9.8 | 0.5% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29728 | CRITICAL | 9.8 | 0.4% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29727 | CRITICAL | 9.8 | 0.4% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29726 | CRITICAL | 9.8 | 0.4% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29725 | CRITICAL | 9.8 | 0.5% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
| CVE-2024-29724 | CRITICAL | 9.8 | 0.4% | Aug 29, 2024 | SQL injection vulnerabilities in SportsNET affecting version 4.0.1. These vulnerabilities could allow an attacker to ret... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now