2024 CVE Vulnerabilities
39,218 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-57889 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: mcp23s08: Fix sleeping in atomic context d... |
| CVE-2024-57888 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Do not warn when cancelling WQ_MEM_RECLA... |
| CVE-2024-57886 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix new damon_target objects leaks o... |
| CVE-2024-57885 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: fix sleeping function called from inva... |
| CVE-2024-57884 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: account for free pages to prevent infin... |
| CVE-2024-57883 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: independent PMD page table shared coun... |
| CVE-2024-57882 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix TCP options overflow. Syzbot reported t... |
| CVE-2024-57844 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix fault on fd close after unbind If user... |
| CVE-2024-57841 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in tcp_conn_request() If inet... |
| CVE-2024-57802 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before accessing it Sy... |
| CVE-2024-54031 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on s... |
| CVE-2024-53681 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: nvmet: Don't overflow subsysnqn nvmet_root_discove... |
| CVE-2024-39282 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: Fix FSM command timeout issue Whe... |
| CVE-2024-36476 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Ensure 'ib_sge list' is accessible Move... |
| CVE-2024-13215 | MEDIUM | 4.3 | 0.5% | Jan 15, 2025 | The Elementor Addon Elements plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,... |
| CVE-2024-11029 | MEDIUM | 5.5 | 0.2% | Jan 15, 2025 | A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence... |
| CVE-2024-12593 | MEDIUM | 6.4 | 0.4% | Jan 15, 2025 | The PDF for WPForms + Drag and Drop Template Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting v... |
| CVE-2024-11851 | MEDIUM | 4.3 | 0.3% | Jan 15, 2025 | The NitroPack plugin for WordPress is vulnerable to unauthorized arbitrary transient update due to a missing capability ... |
| CVE-2024-35280 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiDe... |
| CVE-2024-12818 | MEDIUM | 6.4 | 0.3% | Jan 15, 2025 | The WP Smart TV plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tv-video-player' sho... |
| CVE-2024-12423 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Contact Form 7 Redirect & Thank You Page plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-12403 | MEDIUM | 6.1 | 0.3% | Jan 15, 2025 | The Image Gallery – Responsive Photo Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via th... |
| CVE-2024-10775 | MEDIUM | 4.3 | 0.3% | Jan 15, 2025 | The Piotnet Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and i... |
| CVE-2024-7322 | MEDIUM | 5.8 | 0.3% | Jan 15, 2025 | A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is re... |
| CVE-2024-11870 | MEDIUM | 6.4 | 0.3% | Jan 15, 2025 | The Event Registration Calendar By vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now