Week 12, 2024
18 March to 24 March 2024. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 730CVEs publishedin the whole week
- 68CriticalCVSS 9.0 and above
- 252HighCVSS 7.0 to 8.9
- 0Added to KEVknown exploited, newly listed
Most severe new CVEsBy CVSS score
- CVE-2024-24578
RaspberryMatic Unauthenticated Remote Code Execution vulnerability through HMServer File Upload
jens-maus · RaspberryMatic
Critical10.0 - CVE-2024-2227
IdentityIQ JavaServer Faces File Path Traversal Vulnerability
SailPoint · IdentityIQ
Critical10.0 - CVE-2024-27767
Unitronics Unistream Unilogic – Versions prior to 1.35.227 CWE-287: Improper Authentication
Unitronics · Unistream Unilogic
Critical10.0 - CVE-2024-27956
WordPress Automatic plugin <= 3.92.0 - Unauthenticated Arbitrary SQL Execution vulnerability
ValvePress · Automatic
Critical9.9 - CVE-2024-1800
Progress Telerik Report Server Deserialization
Progress Software Corporation · Telerik Report Server
Critical9.9 - CVE-2024-29135
WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability
Themefic · Tourfic
Critical9.9 - CVE-2024-2599
Unrestricted Upload of File with Dangerous Type vulnerability in AMSS++
Amssplus · AMSS++
Critical9.9 - CVE-2024-29943
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability…
Mozilla · Firefox
Critical9.8 - CVE-2024-29275
SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the…
Product not named
Critical9.8 - CVE-2024-29864
Distrobox before 1.7.0.1 allows attackers to execute arbitrary code via command injection into exported executables.
Product not named
Critical9.8