2024 CVE Vulnerabilities
39,269 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-2592 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'pe... |
| CVE-2024-2591 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php,... |
| CVE-2024-2590 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in t... |
| CVE-2024-2589 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_per... |
| CVE-2024-2588 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter.... |
| CVE-2024-2587 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_perso... |
| CVE-2024-2586 | HIGH | 7.5 | 0.6% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter.... |
| CVE-2024-2585 | HIGH | 7.5 | 0.5% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in... |
| CVE-2024-2584 | HIGH | 7.5 | 0.6% | Mar 18, 2024 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in t... |
| CVE-2024-27773 | HIGH | 8.8 | 0.4% | Mar 18, 2024 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-348: Use of Less Trusted Source may allow RCE |
| CVE-2024-27772 | HIGH | 8.8 | 1.7% | Mar 18, 2024 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-78: 'OS Command Injection' may allow RCE |
| CVE-2024-27771 | HIGH | 8.8 | 0.8% | Mar 18, 2024 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-22: 'Path Traversal' may allow RCE |
| CVE-2024-27770 | HIGH | 8.8 | 0.8% | Mar 18, 2024 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-23: Relative Path Traversal |
| CVE-2024-27769 | HIGH | 8.8 | 0.7% | Mar 18, 2024 | Unitronics Unistream Unilogic – Versions prior to 1.35.227 - CWE-200: Exposure of Sensitive Information to an Unautho... |
| CVE-2024-2002 | HIGH | 7.5 | 1.1% | Mar 18, 2024 | A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(fre... |
| CVE-2024-20767 | HIGH | 7.4 | 98.5% | Mar 18, 2024 | ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could resu... |
| CVE-2024-1013 | HIGH | 7.8 | 0.3% | Mar 18, 2024 | An out-of-bounds stack write flaw was found in unixODBC on 64-bit architectures where the caller has 4 bytes and callee ... |
| CVE-2024-1605 | HIGH | 7.8 | 0.2% | Mar 18, 2024 | BMC Control-M branches 9.0.20 and 9.0.21 upon user login load all Dynamic Link Libraries (DLL) from a directory that g... |
| CVE-2024-29154 | HIGH | 7.4 | 0.4% | Mar 18, 2024 | danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling,... |
| CVE-2024-2581 | HIGH | 8.8 | 1.3% | Mar 18, 2024 | A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. This issue affects the function fromSetR... |
| CVE-2024-24230 | HIGH | 7.5 | 0.7% | Mar 18, 2024 | Komm.One CMS 10.4.2.14 has a Server-Side Template Injection (SSTI) vulnerability via the Velocity template engine. It al... |
| CVE-2024-23139 | HIGH | 7.8 | 0.4% | Mar 18, 2024 | A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A mali... |
| CVE-2024-23138 | HIGH | 7.8 | 0.5% | Mar 18, 2024 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A ... |
| CVE-2024-2568 | HIGH | 7.2 | 0.7% | Mar 17, 2024 | A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical. Affected by this vulnerability is ... |
| CVE-2024-27961 | HIGH | 7.1 | 0.3% | Mar 17, 2024 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codekraft AntiSpam... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now