|
cve-2024-58274
|
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025. |
HIGH
|
8.3
|
19.09%
|
cvelistv5 |
2026-06-17 |
|
cve-2024-5827
|
CVE-2024-5827 |
CRITICAL
|
9.8
|
3.42%
|
cvelistv5 |
|
|
cve-2024-58136
|
Yiiframework Yii Improper Protection of Alternate Path Vulnerability |
HIGH
|
N/A
|
87.76%
|
cvelistv5 |
2025-05-02 |
|
cve-2024-5806
|
CVE-2024-5806 |
CRITICAL
|
9.1
|
81.47%
|
cvelistv5 |
|
|
cve-2024-57968
|
Advantive VeraCore Unrestricted File Upload Vulnerability |
CRITICAL
|
9.9
|
32.28%
|
cvelistv5 |
2025-03-10 |
|
cve-2024-57728
|
SimpleHelp Path Traversal Vulnerability |
CRITICAL
|
N/A
|
6.98%
|
cvelistv5 |
2026-04-24 |
|
cve-2024-57727
|
SimpleHelp Path Traversal Vulnerability |
CRITICAL
|
N/A
|
96.58%
|
cvelistv5 |
2025-02-13 |
|
cve-2024-57726
|
SimpleHelp Missing Authorization Vulnerability |
CRITICAL
|
9.9
|
66.60%
|
cvelistv5 |
2026-04-24 |
|
cve-2024-57049
|
CVE-2024-57049 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2024-56145
|
Craft CMS Code Injection Vulnerability |
HIGH
|
N/A
|
97.41%
|
cvelistv5 |
2025-06-02 |
|
cve-2024-55956
|
Cleo Multiple Products Unauthenticated File Upload Vulnerability |
CRITICAL
|
N/A
|
93.97%
|
cvelistv5 |
2024-12-17 |
|
cve-2024-55591
|
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
CRITICAL
|
N/A
|
94.15%
|
cvelistv5 |
2025-01-14 |
|
cve-2024-55550
|
Mitel MiCollab Path Traversal Vulnerability |
CRITICAL
|
N/A
|
37.90%
|
cvelistv5 |
2025-01-07 |
|
cve-2024-55457
|
MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information. |
MEDIUM
|
6.5
|
3.12%
|
cvelistv5 |
2026-06-17 |
|
cve-2024-54764
|
CVE-2024-54764 |
MEDIUM
|
6.5
|
1.03%
|
cvelistv5 |
|
|
cve-2024-54763
|
CVE-2024-54763 |
MEDIUM
|
6.5
|
0.77%
|
cvelistv5 |
|
|
cve-2024-54085
|
AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability |
CRITICAL
|
10.0
|
60.75%
|
cvelistv5 |
2025-06-25 |
|
cve-2024-53944
|
CVE-2024-53944 |
CRITICAL
|
9.8
|
39.68%
|
cvelistv5 |
|
|
cve-2024-53704
|
SonicWall SonicOS SSLVPN Improper Authentication Vulnerability |
HIGH
|
8.2
|
95.13%
|
cvelistv5 |
2025-02-18 |
|
cve-2024-53677
|
struts: org.apache.struts: mixing setters for uploaded files and normal fields can allow bypass file upload checks |
CRITICAL
|
9.0
|
70.14%
|
cvelistv5 |
2026-08-04 |
|
cve-2024-53197
|
Linux Kernel Out-of-Bounds Access Vulnerability |
HIGH
|
N/A
|
3.56%
|
cvelistv5 |
2025-04-09 |
|
cve-2024-53150
|
Linux Kernel Out-of-Bounds Read Vulnerability |
HIGH
|
N/A
|
1.35%
|
cvelistv5 |
2025-04-09 |
|
cve-2024-53104
|
Linux Kernel Out-of-Bounds Write Vulnerability |
HIGH
|
N/A
|
3.40%
|
cvelistv5 |
2025-02-05 |
|
cve-2024-52875
|
CVE-2024-52875 |
HIGH
|
8.8
|
29.56%
|
cvelistv5 |
|
|
cve-2024-5274
|
Google Chromium V8 Type Confusion Vulnerability |
HIGH
|
N/A
|
7.47%
|
cvelistv5 |
2024-05-28 |
|
cve-2024-5217
|
ServiceNow Incomplete List of Disallowed Inputs Vulnerability |
CRITICAL
|
9.8
|
99.63%
|
cvelistv5 |
2024-07-29 |
|
cve-2024-51567
|
CyberPanel Incorrect Default Permissions Vulnerability |
CRITICAL
|
N/A
|
86.63%
|
cvelistv5 |
2024-11-07 |
|
cve-2024-51378
|
CyberPanel Incorrect Default Permissions Vulnerability |
CRITICAL
|
N/A
|
94.67%
|
cvelistv5 |
2024-12-04 |
|
cve-2024-51211
|
CVE-2024-51211 |
CRITICAL
|
9.8
|
2.26%
|
cvelistv5 |
|
|
cve-2024-50967
|
CVE-2024-50967 |
MEDIUM
|
6.5
|
1.68%
|
cvelistv5 |
|
ndaal KEV