2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-56203 | HIGH | 8.8 | 0.2% | Dec 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in gholme4 Wayne Audio Player wayne-audio-player allows Privilege Escala... |
| CVE-2024-56070 | HIGH | 7.4 | 0.3% | Dec 31, 2024 | Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Confi... |
| CVE-2024-56061 | HIGH | 8.8 | 0.4% | Dec 31, 2024 | Missing Authorization vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Privilege Escalation.This is... |
| CVE-2024-56068 | HIGH | 7.5 | 0.4% | Dec 31, 2024 | Deserialization of Untrusted Data vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup.This issue affects WP S... |
| CVE-2024-56067 | HIGH | 7.5 | 10.0% | Dec 31, 2024 | Missing Authorization vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Exploiting Incorrectly Confi... |
| CVE-2024-56041 | HIGH | 8.5 | 0.5% | Dec 31, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes VibeBP ... |
| CVE-2024-56233 | HIGH | 7.1 | 0.3% | Dec 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kinhelios KinTPV W... |
| CVE-2024-56228 | HIGH | 7.1 | 0.3% | Dec 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFactory Wishlist... |
| CVE-2024-56225 | HIGH | 8.8 | 0.3% | Dec 31, 2024 | Missing Authorization vulnerability in Leap13 Premium Addons for Elementor premium-addons-for-elementor allows Accessing... |
| CVE-2024-56223 | HIGH | 7.1 | 0.3% | Dec 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood Gulr... |
| CVE-2024-56210 | HIGH | 7.1 | 0.3% | Dec 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DeluxeThemes Userp... |
| CVE-2024-56209 | HIGH | 7.1 | 0.3% | Dec 31, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen Kleo ... |
| CVE-2024-12106 | HIGH | 7.5 | 9.4% | Dec 31, 2024 | In WhatsUp Gold versions released before 2024.0.2, an unauthenticated attacker can configure LDAP settings. |
| CVE-2024-56232 | HIGH | 7.1 | 0.1% | Dec 31, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Alex Volkov WP Nice Loader wp-nice-loader allows Stored XSS.This issu... |
| CVE-2024-56230 | HIGH | 7.5 | 0.5% | Dec 31, 2024 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in... |
| CVE-2024-56214 | HIGH | 8.3 | 0.4% | Dec 31, 2024 | Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userp... |
| CVE-2024-56213 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affect... |
| CVE-2024-56212 | HIGH | 8.5 | 0.4% | Dec 31, 2024 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DeluxeThemes Userp... |
| CVE-2024-56211 | HIGH | 8.8 | 0.4% | Dec 31, 2024 | Missing Authorization vulnerability in DeluxeThemes Userpro userpro.This issue affects Userpro: from n/a through <= 5.1.... |
| CVE-2024-45497 | HIGH | 7.6 | 0.6% | Dec 31, 2024 | A flaw was found in the OpenShift build process, where the docker-build container is configured with a hostPath volume m... |
| CVE-2024-13040 | HIGH | 8.8 | 0.5% | Dec 31, 2024 | The QOCA aim from Quanta Computer has an Authorization Bypass Through User-Controlled Key vulnerability. By controlling ... |
| CVE-2024-12839 | HIGH | 8.8 | 0.7% | Dec 31, 2024 | The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypas... |
| CVE-2024-12838 | HIGH | 8.8 | 0.7% | Dec 31, 2024 | The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerabili... |
| CVE-2024-13051 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
| CVE-2024-13050 | HIGH | 7.8 | 0.3% | Dec 30, 2024 | Ashlar-Vellum Graphite VC6 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabili... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now