2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2725 | HIGH | 7.5 | 0.6% | Mar 22, 2024 | Information exposure vulnerability in the CIGESv2 system. A remote attacker might be able to access /vendor/composer/ins... |
| CVE-2024-2724 | HIGH | 7.5 | 0.7% | Mar 22, 2024 | SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. Th... |
| CVE-2024-2723 | HIGH | 7.5 | 0.7% | Mar 22, 2024 | SQL injection vulnerability in the CIGESv2 system, through /ajaxSubServicios.php, in the 'idServicio' parameter. The exp... |
| CVE-2024-2722 | HIGH | 7.5 | 0.7% | Mar 22, 2024 | SQL injection vulnerability in the CIGESv2 system, through /ajaxConfigTotem.php, in the 'id' parameter. The exploitation... |
| CVE-2024-2449 | HIGH | 7.5 | 12.9% | Mar 22, 2024 | A cross-site request forgery vulnerability has been identified in LoadMaster. It is possible for a malicious actor, who... |
| CVE-2024-2448 | HIGH | 8.8 | 55.4% | Mar 22, 2024 | An OS command injection vulnerability has been identified in LoadMaster. An authenticated UI user with any permission s... |
| CVE-2024-29944 | HIGH | 8.4 | 4.7% | Mar 22, 2024 | An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution... |
| CVE-2024-28559 | HIGH | 8.8 | 0.8% | Mar 22, 2024 | SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPri... |
| CVE-2024-28824 | HIGH | 7.8 | 0.2% | Mar 22, 2024 | Least privilege violation and reliance on untrusted inputs in the mk_informix Checkmk agent plugin before Checkmk 2.3.0b... |
| CVE-2024-1848 | HIGH | 7.8 | 0.3% | Mar 22, 2024 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Typ... |
| CVE-2024-2812 | HIGH | 8.8 | 4.0% | Mar 22, 2024 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been classified as critical. This affects the... |
| CVE-2024-25808 | HIGH | 8.3 | 0.4% | Mar 22, 2024 | Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary co... |
| CVE-2024-2805 | HIGH | 8.8 | 1.6% | Mar 22, 2024 | A vulnerability was found in Tenda AC15 15.03.05.18/15.03.20_multi. It has been rated as critical. Affected by this issu... |
| CVE-2024-29031 | HIGH | 7.5 | 1.0% | Mar 21, 2024 | Meshery is an open source, cloud native manager that enables the design and management of Kubernetes-based infrastructur... |
| CVE-2024-28171 | HIGH | 8.1 | 0.6% | Mar 21, 2024 | It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specif... |
| CVE-2024-28040 | HIGH | 8.8 | 8.5% | Mar 21, 2024 | SQL injection vulnerability exists in GetDIAE_astListParameters. |
| CVE-2024-25567 | HIGH | 8.8 | 0.7% | Mar 21, 2024 | Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If ... |
| CVE-2024-23975 | HIGH | 8.8 | 8.5% | Mar 21, 2024 | SQL injection vulnerability exists in GetDIAE_slogListParameters. |
| CVE-2024-23494 | HIGH | 8.8 | 8.5% | Mar 21, 2024 | SQL injection vulnerability exists in GetDIAE_unListParameters. |
| CVE-2024-28891 | HIGH | 8.8 | 8.5% | Mar 21, 2024 | SQL injection vulnerability exists in the script Handler_CFG.ashx. |
| CVE-2024-28521 | HIGH | 7.8 | 0.3% | Mar 21, 2024 | SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute ar... |
| CVE-2024-28119 | HIGH | 8.8 | 1.6% | Mar 21, 2024 | Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to ... |
| CVE-2024-28118 | HIGH | 8.8 | 1.2% | Mar 21, 2024 | Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to ... |
| CVE-2024-28117 | HIGH | 8.8 | 1.4% | Mar 21, 2024 | Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible function... |
| CVE-2024-28116 | HIGH | 8.8 | 5.8% | Mar 21, 2024 | Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now