2024 CVEs¶
457 entries from 2024. 410 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-11639 — Ivanti CSA Auth Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1212 — Progress LoadMaster RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1709 — ConnectWise ScreenConnect Auth Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20439 — Cisco Smart Licensing | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21574 — The issue stems from a missing validation of the pip field in a POST request sent to the… | Critical (10.0) | — | ✅ |
| CVE-2024-21576 — ComfyUI-Bmad-Nodes is vulnerable to Code Injection. | Critical (10.0) | — | ✅ |
| CVE-2024-21577 — ComfyUI-Ace-Nodes is vulnerable to Code Injection. | Critical (10.0) | — | ✅ |
| CVE-2024-23652 — BuildKit Symlink | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2389 — Progress Flowmon RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24576 — Rust Command Injection on Windows | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29943 — Firefox Sandbox Escape | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3094 — XZ Utils Backdoor | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32766 — QNAP NAS RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3400 — Palo Alto PAN-OS GlobalProtect Command Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4040 — CrushFTP VFS Escape | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41110 — Docker AuthZ Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45409 — ruby-saml Signature Bypass | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45519 — Zimbra Postjournal RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50498 — Improper Control of Generation of Code ('Code Injection') vulnerability in LUBUS WP Query… | Critical (10.0) | — | ✅ |
| CVE-2024-50526 — Unrestricted Upload of File with Dangerous Type vulnerability in mahlamusa Multi Purpose… | Critical (10.0) | — | ✅ |
| CVE-2024-50603 — An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. | Critical (10.0) | — | ✅ |
| CVE-2024-51378 — CyberPanel Command Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51567 — CyberPanel RCE | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51791 — Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. | Critical (10.0) | — | ✅ |
| CVE-2024-51793 — Unrestricted Upload of File with Dangerous Type vulnerability in Webful Creations… | Critical (10.0) | — | ✅ |
| CVE-2024-53822 — Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register… | Critical (10.0) | — | ✅ |
| CVE-2024-54261 — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… | Critical (10.0) | — | ✅ |
| CVE-2024-56799 — Simofa is a tool to help automate static website building and deployment. | Critical (10.0) | — | ✅ |
| CVE-2024-5932 — GiveWP Injection | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8522 — LearnPress SQLi | Critical (10.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1800 — Progress Telerik Report Server Authentication Bypass | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20253 — Cisco Unified CM RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20432 — Cisco NDFC Command Injection | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27956 — WP Automatic SQLi | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37287 — Elasticsearch Kibana Prototype Pollution RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37288 — Kibana RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42448 — Veeam Service Provider Console RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45057 — Portainer RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47176 — CUPS RCE | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-57968 — Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to… | Critical (9.9) | — | ✅ |
| CVE-2024-6386 — WPML Multilingual Plugin SSTI | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9014 — pgAdmin4 OAuth2 | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9264 — Grafana SQLi | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9463 — Palo Alto Expedition OS Command Injection | Critical (9.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0012 — Palo Alto PAN-OS Management Interface Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0204 — GoAnywhere MFT Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10028 — Starter Templates | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10470 — WPLMS LMS File Read | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10542 — CleanTalk Anti-Spam RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1071 — WordPress Ultimate Member SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10914 — D-Link NAS Command Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10924 — WordPress Really Simple Security Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11120 — Certain EOL GeoVision devices have an OS Command Injection vulnerability. | Critical (9.8) | — | ✅ |
| CVE-2024-11680 — ProjectSend RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11972 — Hunk Companion WP RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12084 — rsync Heap Buffer Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12209 — WP Starter Templates | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12356 — A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote… | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-13159 — Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and… | Critical (9.8) | — | ✅ |
| CVE-2024-13160 — Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and… | Critical (9.8) | — | ✅ |
| CVE-2024-13161 — Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and… | Critical (9.8) | — | ✅ |
| CVE-2024-1597 — Atlassian PostgreSQL SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20419 — Cisco Smart Install | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20440 — Cisco Smart Licensing | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21334 — Open Mgmt Infra RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21410 — Exchange Server EoP | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21413 — Microsoft Outlook RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21508 — MySQL2 Node.js RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21512 — MySQL2 Code Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21513 — langchain Prompt Injection RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21528 — node-gettext Prototype Pollution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21744 — Mattermost SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23113 — Fortinet FortiOS Format String RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23119 — Centreon SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23653 — BuildKit GRPC Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23692 — Rejetto HFS RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23897 — Jenkins CLI Arbitrary File Read | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24725 — Gibbon CMS RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-25065 — Apache OFBiz SSRF | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-25600 — Bricks Builder RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27132 — MLflow RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27198 — JetBrains TeamCity Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27348 — Apache HugeGraph Server RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28000 — LiteSpeed Cache RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2876 — WPBakery Page Builder | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2879 — LayerSlider SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28986 — SolarWinds Deserialization | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29269 — Telesquare TLR RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29849 — Veeam Backup Enterprise Manager Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32113 — Apache OFBiz Path | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3272 | Critical (9.8) | — | ✅ |
| CVE-2024-3273 — D-Link NAS RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-33883 — Ejs Template RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34102 — Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by… | Critical (9.8) | — | ✅ |
| CVE-2024-36104 — Apache OFBiz Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36401 — GeoServer RCE via Eval Property | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37079 — VMware vCenter Heap Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37080 — VMware vCenter Heap Overflow 2 | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38063 — Windows TCP/IP IPv6 RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38077 — Windows Remote Desktop Licensing RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38476 — Apache HTTP Server SSRF | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38812 — VMware vCenter RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38856 — Apache OFBiz Pre-Auth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39573 — Apache mod_rewrite RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39705 — NLTK Arbitrary Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39943 — Rejetto HFS HTTP File Server RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-40711 — Veeam Backup RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-40803 — SolarWinds RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41107 — CloudStack Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42005 — Django SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4323 — Fluent Bit DoS | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43468 — Microsoft SCCM SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43491 — Windows Update RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4358 — Progress Telerik RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43917 — TI WooCommerce SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44000 — LiteSpeed Cache Cookie Leak | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44349 — ANTEEO B2B SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45195 — Apache OFBiz Unauth RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45216 — Solr Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45337 — x-api SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45498 — fastapi-admin RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4577 — PHP CGI Argument Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-46327 — Ruijie RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47062 — Navidrome SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47066 — CodeChecker RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47561 — Apache Avro RCE via Schema | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47575 — FortiManager Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48245 — Sparkshop SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48248 — NAKIVO Backup RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4879 — ServiceNow has addressed an input validation vulnerability that was identified in… | Critical (9.8) | — | ✅ |
| CVE-2024-4885 — WhatsUp Gold Path Traversal | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4898 — InstaWP Connect | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49112 — Windows LDAP Remote Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5009 — Progress WhatsUp SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50379 — Apache Tomcat RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50388 — QNAP HBS 3 Command Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50398 — Trend Micro Deep Discovery RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50510 — WP Forms Arbitrary File Upload | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50593 — VeridiumAD Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50623 — Cleo File Transfer RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5217 — ServiceNow has addressed an input validation vulnerability that was identified in the… | Critical (9.8) | — | ✅ |
| CVE-2024-52316 — Apache Tomcat Auth | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5276 — FileCatalyst SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52875 — GFI KerioControl RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53376 — CyberPanel Remote Code Execution | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53704 — An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a… | Critical (9.8) | — | ✅ |
| CVE-2024-54085 — AMI’s SPx contains | Critical (9.8) | — | ✅ |
| CVE-2024-54679 — Mitel MiCollab SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55591 — FortiOS Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55956 — Cleo Harmony/VLTrader/LexiCom RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-56145 — Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web… | Critical (9.8) | — | ✅ |
| CVE-2024-56337 — Apache Tomcat RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6047 — Certain EOL GeoVision devices fail to properly filter user input for the specific… | Critical (9.8) | — | ✅ |
| CVE-2024-6198 — Viasat Modem RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6327 — Progress Telerik RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6632 — FileCatalyst SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6670 — WhatsUp Gold SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6671 — WhatsUp Gold SQLi | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7593 — Ivanti Virtual Traffic Manager Authentication Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8503 — VICIdial SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8517 — SPIP RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8695 — Docker Desktop RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8696 — Docker Desktop RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8924 — ServiceNow Blind SQL Injection | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9234 — GutenKit RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9488 — GitHub Enterprise Auth Bypass | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9537 — ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an… | Critical (9.8) | — | ✅ |
| CVE-2024-9680 — Firefox Use-After-Free | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20252 — Cisco Expressway CSRF | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21762 — Fortinet FortiOS Out-of-Bounds Write | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29824 — Ivanti EPM SQLi | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4671 — Chrome Visuals UAF | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4947 — Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to… | Critical (9.6) | — | ✅ |
| CVE-2024-5274 — Chrome V8 Type Confusion | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7971 — Chrome V8 Type Confusion | Critical (9.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53677 — Apache Struts RCE | Critical (9.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9487 — GitHub Enterprise SAML Bypass | Critical (9.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8963 — Ivanti vTM Auth Bypass | Critical (9.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11616 — Fortinet FortiOS SSL VPN | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-40766 — SonicWall SSLVPN Bypass | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42009 — A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7… | Critical (9.3) | — | ✅ |
| CVE-2024-54143 — OpenWrt Attended Sysupgrade Command Injection | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5910 — Palo Alto Expedition | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9464 — Palo Alto Expedition Authenticated Command Injection | Critical (9.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9465 — Palo Alto Expedition SQL Injection | Critical (9.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21887 — A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x)… | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23564 — HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid… | Critical (9.1) | — | ✅ |
| CVE-2024-28987 — SolarWinds WHD Credentials | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29415 — Node.js ip Package SSRF | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37404 — Ivanti Endpoint RCE | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37768 — Jira Privilege Escalation | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38475 — Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier… | Critical (9.1) | — | ✅ |
| CVE-2024-39929 — Exim RCE | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41713 — Mitel MiCollab Path Traversal | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45801 — DOMPurify Prototype Pollution | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48914 — Vendure Path Traversal | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51479 — Next.js Authorization Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51504 — Apache ZooKeeper ACL Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52302 — Omniauth OIDC Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53900 — Mongoose ODM RCE via Search Injection | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53990 — AsyncSSH RCE via Extension Negotiation | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5805 — MOVEit Auth Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5806 — MOVEit SFTP Bypass | Critical (9.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8956 — PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient… | Critical (9.1) | — | ✅ |
| CVE-2024-0132 — NVIDIA Container RCE | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31989 — Argo CD Redis Access | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32002 — Git RCE | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3596 — RADIUS Protocol Bypass | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45200 — Mario Kart 8 Deluxe RCE | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47076 — CUPS libcupsfilters | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47175 — CUPS libppd | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47177 — CUPS cups-filters | Critical (9.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-58136 — Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class… | Critical (9.0) | — | ✅ |
| CVE-2024-0519 — Chrome V8 Out-of-Bounds Memory Access | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-10979 — PostgreSQL Extension | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1938 — Type Confusion in V8 (Chromium/Node.js) | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20674 — Windows Security Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20698 — Windows Kerberos EoP | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20953 — Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). | High (8.8) | — | ✅ |
| CVE-2024-23222 — Apple WebKit RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23898 — Jenkins WebSocket XSS/CSRF | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27130 — QNAP NAS Buffer Overflow | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27131 — QNAP NAS Buffer Overflow | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27860 — Apple AVEVideoEncoder | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2887 — Chrome WebAssembly | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29988 — Windows SmartScreen Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30040 — Windows MSHTML Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30078 — Windows Wi-Fi Driver RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30088 — Windows Kernel Elevation of Privilege | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31210 — WordPress Core RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3159 — Chrome V8 OOB | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34144 — Jenkins Sandbox Bypass | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38189 — Microsoft Project RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-40890 — A post-authentication command injection vulnerability in the CGI program of the legacy… | High (8.8) | — | ✅ |
| CVE-2024-40891 — A post-authentication command injection vulnerability in the management commands of the… | High (8.8) | — | ✅ |
| CVE-2024-43044 — Jenkins Remoting File Read | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43453 — Windows RRAS RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43461 — Windows MSHTML Spoofing | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43532 — Windows RPC EoP | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44308 — Apple WebKit RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4761 — Chrome V8 OOB Write | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47655 — SuiteCRM RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49039 — Windows Task Scheduler | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50050 — Apache Airflow DAG Parsing RCE | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53247 — Splunk RCE via XSLT | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6257 — HashiCorp Vault LDAP | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7965 — Chrome V8 Type Confusion | High (8.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23651 — BuildKit Mount Race | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3393 — Palo Alto DNS DoS | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49035 — An improper access control vulnerability in Partner.Microsoft.com allows an a… | High (8.7) | — | ✅ |
| CVE-2024-50430 — GitLab Pipeline Bypass | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52301 — Laravel Env Manipulation | High (8.7) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20353 — Cisco ASA WebVPN | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21626 — runc Container Escape (Leaky Vessels) | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23831 — LangChain Server-Side Request Forgery | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24919 — Checkpoint VPN Info Leak | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28995 — SolarWinds Serv-U Path Traversal | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50380 — Apache Tomcat Path Traversal | High (8.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11205 — WPForms Stripe Payment Bypass | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20289 — ColdFusion RCE | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-51739 — SugarCRM Auth Bypass | High (8.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal | High (8.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4978 — Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed… | High (8.4) | — | ✅ |
| CVE-2024-21683 — Atlassian Confluence Remote Code Execution | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22024 — Ivanti Connect XXE | High (8.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20767 — ColdFusion Path Traversal | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21490 — angular-expressions Prototype Pollution | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21893 — Ivanti Connect SSRF | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21894 — Ivanti Connect Secure Heap Overflow | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22257 — Spring Security Authorization Bypass | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27983 — Node.js HTTP/2 Server Crash | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50340 — Symfony PoC XSS | High (8.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21412 — Windows Defender Bypass | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21687 — Bamboo Injection | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22243 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22259 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22262 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22273 — VMware vCenter DoS | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-25710 — Apache Commons Compress Infinite Loop | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27980 — Node.js Command Injection on Windows | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32030 — Kafka UI RCE via JMX | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32879 — PyMongo Out-of-bounds Read | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3656 — Keycloak Session Hijacking | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39689 — Django SQL Injection in QuerySet.values()/values_list() | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6387 — OpenSSH regreSSHion RCE | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21378 — Outlook RCE | High (8.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52308 — GitHub CLI RCE via SSH URL | High (8.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8068 — Privilege escalation to NetworkService Account access in Citrix Session Recording when an… | High (8.0) | — | ✅ |
| CVE-2024-8069 — Limited remote code execution with privilege of a NetworkService Account access in Citrix… | High (8.0) | — | ✅ |
| CVE-2024-0193 — Netfilter UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-1086 — Linux Kernel Netfilter Privilege Escalation | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11003 — Qualys agent LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11477 — 7-Zip Zstandard Decompression RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12754 — AnyDesk Local Priv Esc | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20656 — VSCode RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21338 — Windows Kernel AppLocker Bypass | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22667 — Vim Heap Buffer Overflow | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23296 — Apple RTKit RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27804 — Apple Kernel EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30051 — Windows DWM EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-35250 — Windows Kernel EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3566 — Windows Env Path | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36886 — Linux Kernel UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36971 — Linux Kernel UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37081 — VMware vCenter EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38107 — Windows Power Mgmt EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38193 — Windows AFD EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43047 — Qualcomm DSP UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43093 — Android Framework LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43572 — Microsoft MMC RCE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48990 — Needrestart LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48991 — Needrestart Race Condition | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-48992 — Needrestart Ruby LPE | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49138 — Windows CLFS Driver Privilege Escalation | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53104 — Linux Kernel USB Video UAF | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53197 — In the Linux kernel, the following vulnerability has been resolved: | High (7.8) | — | ✅ |
| CVE-2024-21351 — Windows SmartScreen Security Bypass | High (7.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0567 — GnuTLS Certificate Verification Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11667 — Zyxel Firewall Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12085 — rsync Information Leak via Uninitialized Stack | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21538 — cross-spawn ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21685 — Jira Info Disclosure | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22201 — Jetty HTTP/2 HPACK DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22233 — Spring Framework Web DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23334 — aiohttp Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24549 — Apache Tomcat HTTP/2 DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24762 — python-multipart DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24989 — Nginx HTTP/3 NULL Pointer Dereference | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24990 — Nginx HTTP/3 Use-After-Free | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-25062 — libxml2 Use-After-Free | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27316 — HTTP2 CONTINUATION DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28102 — JWCrypto JWT Signature Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28757 — libexpat XML Entity Expansion DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29059 — .NET Info Disclosure | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29131 — Apache Commons Configuration RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29133 — Apache Commons Configuration Stack Overflow | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34155 — Go go/parser Stack Exhaustion | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34156 — Go encoding/gob Stack Exhaustion | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34351 — Next.js Server Actions SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-35255 — Azure Identity Credential Leak | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37087 — VMware vCenter SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37168 — gRPC-Node Memory Allocation DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37890 — ws WebSocket DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38112 — Windows MSHTML RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38178 — Microsoft Scripting RCE | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38200 — Office Spoofing NTLM | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38472 — Apache HTTP Server SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38808 — Spring Framework Expression DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38813 — VMware vCenter EoP | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38816 — Spring WebFlux Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38819 — Spring Framework Path Traversal (2nd Report) | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39249 — async ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39338 — Axios SSRF via Protocol Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4067 — micromatch ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4068 — braces ReDoS Vulnerability | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41818 — fast-xml-parser ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-41991 — Django URL Validation DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42473 — OpenStack Ironic Image Manipulation | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44131 — Apple iOS/macOS TCC Bypass via Symlink | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45230 — Django DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45296 — path-to-regexp ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45338 — Go HTML Package Infinite Loop | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45590 — body-parser Content-Type DoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-46982 — Next.js Cache Poisoning | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-4741 — OpenSSL Use-After-Free in SSL_free_buffers | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47874 — Starlette Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49113 — Windows LDAP Denial of Service (LDAPNightmare) | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-49761 — Ruby REXML ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50404 — Synology Photos Path Traversal | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-5178 — Progress Telerik Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52798 — path-to-regexp ReDoS | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52940 — AnyDesk Arbitrary File Read | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6221 — Flask-CORS Origin Bypass | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-7347 — Nginx mp4 Buffer Overflow | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22234 — Spring Security Bypass | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-3116 — pgAdmin4 RCE | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9956 — Chrome WebAuthn Passkey Phishing | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12987 — A vulnerability, which was classified as critical, was found in DrayTek Vigor2960 and… | High (7.3) | — | ✅ |
| CVE-2024-27199 — JetBrains TeamCity Path Traversal | High (7.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29156 — Yarn Hardlink Cache Injection | High (7.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38202 — Windows Backup EoP | High (7.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0507 — GitHub Enterprise SSRF | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12686 — BeyondTrust PRA/RS Command Injection | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22026 — Ivanti Connect SSRF | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22274 — VMware vCenter RCE | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37085 — VMware ESXi Auth Bypass | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38094 — SharePoint RCE | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8190 — Ivanti CSA Command Injection | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9380 — Ivanti CSA OS Injection | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9381 — Ivanti CSA Path Traversal | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9474 — Palo Alto PAN-OS Privilege Escalation | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-23225 — Apple Kernel Read | High (7.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-46983 — Ant Design XSS | High (7.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53150 — In the Linux kernel, the following vulnerability has been resolved: | High (7.1) | — | ✅ |
| CVE-2024-28085 — util-linux wall Command Injection | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-36972 — Linux Kernel AF_UNIX Race Condition | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38106 — Windows Kernel EoP | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6409 — OpenSSH Race | High (7.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39717 — Versa Director RCE | Medium (6.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-24758 — undici Authorization Header Leak | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28849 — follow-redirects SSRF/Credential Leak | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28863 — tar (npm) Denial of Service | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30260 — undici CRLF Injection | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-32760 — Nginx HTTP/3 Buffer Overwrite | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34459 — libxml2 Buffer Over-read | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38213 — Windows Mark of Web Bypass | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43451 — Windows NTLM Hash | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43573 — Windows MSHTML Spoofing | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47764 — cookie Package Prototype Pollution | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9379 — Ivanti CSA SQLi | Medium (6.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-43788 — Webpack Code Injection | Medium (6.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47068 — Rollup DOM Clobbering | Medium (6.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-52304 — aiohttp Request Smuggling | Medium (6.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-11643 — Swagger UI XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22195 — Jinja2 Cross-Site Scripting | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-26331 — GitBook XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-29041 — Express.js Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37383 — Roundcube XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37384 — Roundcube XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-42353 — WebOb Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44309 — Apple WebKit XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-45389 — react-router XSS via navigate() | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-47878 — OpenRefine Reflected XSS | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50341 — Symfony Open Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-53255 — Nuxt XSS via asyncData | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-8698 — Keycloak Redirect | Medium (6.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20359 — Cisco ASA RCE | Medium (6.0) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-2511 — OpenSSL TLSv1.3 Session Cache DoS | Medium (5.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31497 — PuTTY ECDSA Key Recovery | Medium (5.9) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-35195 — Requests Cert Verification Disabled on Redirects | Medium (5.6) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-0727 — OpenSSL PKCS12 Decoding Crash | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-27834 — Apple WebKit Bypass | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31228 — Redis ACL Selector DoS | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44204 — Apple VoiceOver | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44243 — macOS SIP Bypass | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-50302 — Linux Kernel Uninitialized | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-9341 — Podman Path Traversal | Medium (5.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-34064 — Jinja2 SSTI via xmlattr Filter | Medium (5.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-46538 — pfSense Stored XSS | Medium (5.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-21733 — Apache Tomcat Info Leak | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22023 — Ivanti Policy Secure XXE | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-28176 — jose JWT Algorithm Confusion | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-30261 — undici Fetch Cookie Policy Bypass | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-31079 — Nginx HTTP/3 Stack Overflow | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38820 — Spring Framework DataBinder Case Sensitive Match Exception | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-39329 — Django Username Enumeration | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-55565 — nanoid Predictable Output | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-6551 — GiveWP Info Leak | Medium (5.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-12345 — A vulnerability classified as problematic was found in INW Krbyyyzo 25.2002. | Medium (4.4) | — | ✅ |
| CVE-2024-55550 — Mitel MiCollab LFI | Medium (4.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-44207 — Apple Messages | Medium (4.3) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-20399 — Cisco NX-OS CLI Command Injection | Critical | — | ✅ |
| CVE-2024-23917 — JetBrains TeamCity Authentication Bypass | Critical | — | ✅ |
| CVE-2024-37920 — Certifi Improper Certificate Validation | Critical | — | ✅ |
| CVE-2024-45387 — Apache Traffic Server | High | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-88888 — Remote Code Execution vulnerability in Apache web server mod_proxy module allowing… | Unrated | — | ✅ |
| CVE-2024-99999 — Test SQL Injection vulnerability in user authentication form. | Unrated | — | ✅ |