2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-23795 | HIGH | 7.8 | 0.3% | Feb 13, 2024 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0012), Tecnomatix Plant S... |
| CVE-2024-22042 | HIGH | 7.8 | 0.1% | Feb 13, 2024 | A vulnerability has been identified in Unicam FX (All versions). The windows installer agent used in affected product co... |
| CVE-2024-22454 | HIGH | 8.8 | 0.6% | Feb 13, 2024 | Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgot... |
| CVE-2024-22445 | HIGH | 7.2 | 1.4% | Feb 13, 2024 | Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remo... |
| CVE-2024-25914 | HIGH | 8.8 | 0.2% | Feb 13, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in Photoboxone SMTP Mail.This issue affects SMTP Mail: from n/a through ... |
| CVE-2024-22129 | HIGH | 7.6 | 0.3% | Feb 13, 2024 | SAP Companion - version <3.1.38, has a URL with parameter that could be vulnerable to XSS attack. The attacker could sen... |
| CVE-2024-22024 | HIGH | 8.3 | 94.7% | Feb 13, 2024 | An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Se... |
| CVE-2024-25642 | HIGH | 7.4 | 0.5% | Feb 13, 2024 | Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine ser... |
| CVE-2024-24743 | HIGH | 7.5 | 0.5% | Feb 13, 2024 | SAP NetWeaver AS Java (CAF - Guided Procedures) - version 7.50, allows an unauthenticated attacker to submit a malicious... |
| CVE-2024-22131 | HIGH | 7.2 | 1.1% | Feb 13, 2024 | In SAP ABA (Application Basis) - versions 700, 701, 702, 731, 740, 750, 751, 752, 75C, 75I, an attacker authenticated as... |
| CVE-2024-25407 | HIGH | 7.5 | 0.6% | Feb 13, 2024 | SteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerab... |
| CVE-2024-24337 | HIGH | 8 | 0.8% | Feb 12, 2024 | CSV Injection vulnerability in '/members/moremember.pl' and '/admin/aqbudgets.pl' endpoints in Koha Library Management S... |
| CVE-2024-23762 | HIGH | 7.8 | 0.3% | Feb 12, 2024 | Unrestricted File Upload vulnerability in Content Manager feature in Gambio 4.9.2.0 allows attackers to execute arbitrar... |
| CVE-2024-23833 | HIGH | 7.5 | 1.0% | Feb 12, 2024 | OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability e... |
| CVE-2024-25110 | HIGH | 8.1 | 6.6% | Feb 12, 2024 | The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocati... |
| CVE-2024-25108 | HIGH | 8.8 | 0.7% | Feb 12, 2024 | Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficien... |
| CVE-2024-22228 | HIGH | 7.8 | 0.6% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cifssupport utility. An au... |
| CVE-2024-22227 | HIGH | 7.8 | 0.6% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_dc utility. An authenticat... |
| CVE-2024-22225 | HIGH | 7.8 | 1.0% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_supportassist utility. An ... |
| CVE-2024-22224 | HIGH | 7.8 | 0.9% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_nas utility. An authentica... |
| CVE-2024-22223 | HIGH | 7.8 | 0.9% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_cbr utility. An authen... |
| CVE-2024-22222 | HIGH | 7.8 | 0.9% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability within its svc_udoctor utility. An au... |
| CVE-2024-0170 | HIGH | 7.8 | 0.8% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in its svc_cava utility. An authentic... |
| CVE-2024-0168 | HIGH | 7.8 | 0.8% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains a Command Injection Vulnerability in svc_oscheck utility. An authenticated ... |
| CVE-2024-0167 | HIGH | 7.8 | 0.8% | Feb 12, 2024 | Dell Unity, versions prior to 5.4, contains an OS Command Injection Vulnerability in the svc_topstats utility. An authe... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now