2024 CVE Vulnerabilities
39,256 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-50566 | HIGH | 8.8 | 1.1% | Jan 14, 2025 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F... |
| CVE-2024-48890 | HIGH | 8.8 | 1.1% | Jan 14, 2025 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in ... |
| CVE-2024-47572 | HIGH | 8 | 0.6% | Jan 14, 2025 | An improper neutralization of formula elements in a csv file in Fortinet FortiSOAR 7.2.1 through 7.4.1 allows attacker t... |
| CVE-2024-46670 | HIGH | 7.5 | 0.6% | Jan 14, 2025 | An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below... |
| CVE-2024-46668 | HIGH | 7.5 | 1.0% | Jan 14, 2025 | An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4,... |
| CVE-2024-46667 | HIGH | 7.5 | 0.6% | Jan 14, 2025 | A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all... |
| CVE-2024-36512 | HIGH | 7.2 | 1.3% | Jan 14, 2025 | An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyze... |
| CVE-2024-35277 | HIGH | 7.5 | 0.7% | Jan 14, 2025 | A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager versio... |
| CVE-2024-35275 | HIGH | 8.8 | 0.8% | Jan 14, 2025 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version... |
| CVE-2024-35273 | HIGH | 8.8 | 0.6% | Jan 14, 2025 | A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 al... |
| CVE-2024-33503 | HIGH | 7.8 | 0.2% | Jan 14, 2025 | A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2... |
| CVE-2024-33502 | HIGH | 7.2 | 1.2% | Jan 14, 2025 | An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyze... |
| CVE-2024-27778 | HIGH | 8.8 | 0.5% | Jan 14, 2025 | An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet Fo... |
| CVE-2024-26012 | HIGH | 7.8 | 0.7% | Jan 14, 2025 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiAP-S 6.2 a... |
| CVE-2024-11864 | HIGH | 7.5 | 0.5% | Jan 14, 2025 | Specifically crafted SCMI messages sent to an SCP running SCP-Firmware release versions up to and including 2.15.0 may l... |
| CVE-2024-11497 | HIGH | 8.8 | 0.4% | Jan 14, 2025 | An authenticated attacker can use this vulnerability to perform a privilege escalation to gain root access. |
| CVE-2024-53649 | HIGH | 7.1 | 0.6% | Jan 14, 2025 | A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.80), SIPROTEC 5 6MD85 (CP300) (All ve... |
| CVE-2024-47100 | HIGH | 7.2 | 0.2% | Jan 14, 2025 | A vulnerability has been identified in SIMATIC S7-1200 CPU 1211C AC/DC/Rly (6ES7211-1BE40-0XB0), SIMATIC S7-1200 CPU 121... |
| CVE-2024-12365 | HIGH | 8.5 | 1.7% | Jan 14, 2025 | The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check o... |
| CVE-2024-12008 | HIGH | 7.5 | 2.2% | Jan 14, 2025 | The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.... |
| CVE-2024-12398 | HIGH | 8.8 | 0.5% | Jan 14, 2025 | An improper privilege management vulnerability in the web management interface of the Zyxel WBE530 firmware versions thr... |
| CVE-2024-57664 | HIGH | 7.5 | 0.5% | Jan 14, 2025 | An issue in the sqlg_group_node component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of ... |
| CVE-2024-57663 | HIGH | 7.5 | 0.7% | Jan 14, 2025 | An issue in the sqlg_place_dpipes component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial o... |
| CVE-2024-57662 | HIGH | 7.5 | 0.8% | Jan 14, 2025 | An issue in the sqlg_hash_source component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of... |
| CVE-2024-57661 | HIGH | 7.5 | 0.8% | Jan 14, 2025 | An issue in the sqlo_df component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service ... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now