2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-28131 | HIGH | 7.8 | 0.2% | Mar 26, 2024 | EasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer,... |
| CVE-2024-28033 | HIGH | 7.3 | 1.0% | Mar 26, 2024 | OS command injection vulnerability exists in WebProxy 1.7.8 and 1.7.9, which may allow a remote unauthenticated attacker... |
| CVE-2024-29195 | HIGH | 8.1 | 5.0% | Mar 26, 2024 | The azure-c-shared-utility is a C library for AMQP/MQTT communication to Azure Cloud Services. This library may be used ... |
| CVE-2024-29189 | HIGH | 7.8 | 0.3% | Mar 26, 2024 | PyAnsys Geometry is a Python client library for the Ansys Geometry service and other CAD Ansys products. On file src/ans... |
| CVE-2024-0866 | HIGH | 8.1 | 0.7% | Mar 26, 2024 | The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and in... |
| CVE-2024-29302 | HIGH | 7.5 | 0.8% | Mar 26, 2024 | SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php. |
| CVE-2024-29301 | HIGH | 7.5 | 0.8% | Mar 26, 2024 | SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id= |
| CVE-2024-1973 | HIGH | 8.5 | 0.4% | Mar 25, 2024 | By leveraging the vulnerability, lower-privileged users of Content Manager can manipulate Content Manager clients to ele... |
| CVE-2024-2427 | HIGH | 7.5 | 0.7% | Mar 25, 2024 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling i... |
| CVE-2024-2426 | HIGH | 7.5 | 2.8% | Mar 25, 2024 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in ... |
| CVE-2024-2425 | HIGH | 7.5 | 2.8% | Mar 25, 2024 | A denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in ... |
| CVE-2024-29515 | HIGH | 8.8 | 1.2% | Mar 25, 2024 | File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via upload... |
| CVE-2024-28850 | HIGH | 8.1 | 0.2% | Mar 25, 2024 | WP Crontrol controls the cron events on WordPress websites. WP Crontrol includes a feature that allows administrative u... |
| CVE-2024-28107 | HIGH | 8.8 | 1.0% | Mar 25, 2024 | phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection ... |
| CVE-2024-28105 | HIGH | 7.2 | 1.5% | Mar 25, 2024 | phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. The category imag... |
| CVE-2024-27299 | HIGH | 8.8 | 1.2% | Mar 25, 2024 | phpMyFAQ is an open source FAQ web application for PHP 8.1+ and MySQL, PostgreSQL and other databases. A SQL injection v... |
| CVE-2024-30205 | HIGH | 7.1 | 0.5% | Mar 25, 2024 | In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23. |
| CVE-2024-30202 | HIGH | 7.8 | 1.1% | Mar 25, 2024 | In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.... |
| CVE-2024-28434 | HIGH | 7.6 | 0.7% | Mar 25, 2024 | The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg fil... |
| CVE-2024-28387 | HIGH | 7.5 | 0.4% | Mar 25, 2024 | An issue in axonaut v.3.1.23 and before allows a remote attacker to obtain sensitive information via the log.txt compone... |
| CVE-2024-25002 | HIGH | 8.8 | 1.2% | Mar 25, 2024 | Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access t... |
| CVE-2024-25964 | HIGH | 7.5 | 0.7% | Mar 25, 2024 | Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability. A remote unauthenticated at... |
| CVE-2024-24899 | HIGH | 7.2 | 1.7% | Mar 25, 2024 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in openEuler ao... |
| CVE-2024-24897 | HIGH | 8.1 | 1.4% | Mar 25, 2024 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in openEuler A-Tune-Co... |
| CVE-2024-24892 | HIGH | 8.1 | 0.9% | Mar 25, 2024 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Improper Privilege Managemen... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now