# Vulnerabilities published in 2024


- [CVE-2024-6720](https://insights.sbomify.com/CVE-2024-6720/): Light Poll <= 1.0.0 - Poll Answers Deletion via CSRF (medium 6.1)
- [CVE-2024-6719](https://insights.sbomify.com/CVE-2024-6719/): Offload Videos – Bunny.net, AWS S3 <= 1.0.1 Subscriber+ CSRF (high 8.1)
- [CVE-2024-6718](https://insights.sbomify.com/CVE-2024-6718/): PVN Auth Popup <= 1.0.0 - Contributor+ XSS via Shortcode (medium 5.4)
- [CVE-2024-6717](https://insights.sbomify.com/CVE-2024-6717/): Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking (high 7.7)
- [CVE-2024-6715](https://insights.sbomify.com/CVE-2024-6715/): Ditty 3.1.39-3.1.45 - Author+ Stored XSS (medium 6.1)
- [CVE-2024-6714](https://insights.sbomify.com/CVE-2024-6714/): Privilege escalation in Ubuntu Desktop Provision (high 8.8)
- [CVE-2024-6713](https://insights.sbomify.com/CVE-2024-6713/): PVN Auth Popup <= 1.0.0 - Admin+ Stored XSS (medium 4.8)
- [CVE-2024-6712](https://insights.sbomify.com/CVE-2024-6712/): MapFig Studio <= 0.2.1 - Stored XSS via CSRF (medium 6.1)
- [CVE-2024-6711](https://insights.sbomify.com/CVE-2024-6711/): Event Tickets with Ticket Scanner < 2.3.8 - Admin+ Stored XSS (low 3.5)
- [CVE-2024-6710](https://insights.sbomify.com/CVE-2024-6710/): Ditty < 3.1.45 - Author+ Stored XSS (medium 5.4)
- [CVE-2024-6709](https://insights.sbomify.com/CVE-2024-6709/): Sync Post With Other Site <= 1.6 - Missing Authorization to Authenticated (Subscriber+) Post Creation and Update (medium 4.3)
- [CVE-2024-6708](https://insights.sbomify.com/CVE-2024-6708/): Profile Builder <= 3.12.0 - Admin+ Stored Cross Site Scripting (medium 4.8)
- [CVE-2024-6707](https://insights.sbomify.com/CVE-2024-6707/): Open WebUI Arbitrary File Upload + Path Traversal (high 7.5)
- [CVE-2024-6706](https://insights.sbomify.com/CVE-2024-6706/): Open WebUI Stored Cross-Site Scripting (medium 6.3)
- [CVE-2024-6705](https://insights.sbomify.com/CVE-2024-6705/): RegLevel <= 1.2.1 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 5.5)
- [CVE-2024-6704](https://insights.sbomify.com/CVE-2024-6704/): Comments – wpDiscuz <= 7.6.21 - Unauthenticated HTML Injection (medium 5.3)
- [CVE-2024-6703](https://insights.sbomify.com/CVE-2024-6703/): Cross-site scripting in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (medium 4.9)
- [CVE-2024-6702](https://insights.sbomify.com/CVE-2024-6702/): Cross-site scripting in Pega Infinity (medium 5.2)
- [CVE-2024-6701](https://insights.sbomify.com/CVE-2024-6701/): Cross-site scripting in Pega Infinity (medium 5.5)
- [CVE-2024-6700](https://insights.sbomify.com/CVE-2024-6700/): Cross-site scripting in Pega Infinity (medium 5.5)
- [CVE-2024-6699](https://insights.sbomify.com/CVE-2024-6699/): SQLi in Mikafon Electronic's Mikafon MA7 (critical 9.3)
- [CVE-2024-6698](https://insights.sbomify.com/CVE-2024-6698/): FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation (high 8.8)
- [CVE-2024-6697](https://insights.sbomify.com/CVE-2024-6697/): Hitachi Vantara Pentaho Business Analytics Server - Improper Handling of Insufficient Permissions or Privileges (medium 6.5)
- [CVE-2024-6696](https://insights.sbomify.com/CVE-2024-6696/): Hitachi Vantara Pentaho Business Analytics Server - Insufficient Granularity of Access Control (medium 4.9)
- [CVE-2024-6695](https://insights.sbomify.com/CVE-2024-6695/): profile-builder <= 3.11.8 - Unauthenticated Privilege Escalation (critical 9.8)
- [CVE-2024-6694](https://insights.sbomify.com/CVE-2024-6694/): WP Mail SMTP <= 4.0.1 - Authenticated (Admin+) SMTP Password Exposure (low 2.7)
- [CVE-2024-6693](https://insights.sbomify.com/CVE-2024-6693/): WP Content Copy Protection & No Right Click (premium) <= 15.0 - Admin+ Stored XSS (medium 4.8)
- [CVE-2024-6692](https://insights.sbomify.com/CVE-2024-6692/): Cross-site scripting in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy (low 3.3)
- [CVE-2024-6691](https://insights.sbomify.com/CVE-2024-6691/): Cross-site scripting in Easy Digital Downloads – eCommerce Payments and Subscriptions made easy (medium 4.4)
- [CVE-2024-6690](https://insights.sbomify.com/CVE-2024-6690/): WP Content Copy Protection & No Right Click (premium) < 15.3 - Open Redirect (medium 6.1)
- [CVE-2024-6689](https://insights.sbomify.com/CVE-2024-6689/): Local privilege escalation vulnerability in baramundi Management Agent via MSI Installer (high 7.8)
- [CVE-2024-6688](https://insights.sbomify.com/CVE-2024-6688/): Oxygen Builder <= 4.8.3 - Missing Authorization to Authenticated (Subscriber+) Stylesheet Update (medium 4.3)
- [CVE-2024-6687](https://insights.sbomify.com/CVE-2024-6687/): CTT Expresso para WooCommerce <= 3.2.12 - Information Exposure via Unprotected Directory (medium 5.3)
- [CVE-2024-6685](https://insights.sbomify.com/CVE-2024-6685/): Authorization Bypass Through User-Controlled Key in GitLab (low 3.1)
- [CVE-2024-6684](https://insights.sbomify.com/CVE-2024-6684/): Authentication Bypass in GST Electronics' inohom Nova Panel N7 (critical 9.9)
- [CVE-2024-6681](https://insights.sbomify.com/CVE-2024-6681/): witmy my-springsecurity-plus dept sql injection (medium 5.3)
- [CVE-2024-6680](https://insights.sbomify.com/CVE-2024-6680/): witmy my-springsecurity-plus build sql injection (medium 5.3)
- [CVE-2024-6679](https://insights.sbomify.com/CVE-2024-6679/): witmy my-springsecurity-plus role sql injection (medium 5.3)
- [CVE-2024-6678](https://insights.sbomify.com/CVE-2024-6678/): Authentication Bypass by Spoofing in GitLab (critical 9.9)
- [CVE-2024-6677](https://insights.sbomify.com/CVE-2024-6677/): Privilege escalation in uberAgent (high 7.3)
- [CVE-2024-6676](https://insights.sbomify.com/CVE-2024-6676/): witmy my-springsecurity-plus user sql injection (medium 5.3)
- [CVE-2024-6675](https://insights.sbomify.com/CVE-2024-6675/): Deserialization of Untrusted Data Vulnerability in NI VeriStand Project File (high 7.8)
- [CVE-2024-6674](https://insights.sbomify.com/CVE-2024-6674/): Data Leak through CORS Misconfiguration in parisneo/lollms-webui (high 8.1)
- [CVE-2024-6673](https://insights.sbomify.com/CVE-2024-6673/): CSRF Vulnerability in parisneo/lollms-webui (medium 4.4)
- [CVE-2024-6672](https://insights.sbomify.com/CVE-2024-6672/): WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability (high 8.8)
- [CVE-2024-6671](https://insights.sbomify.com/CVE-2024-6671/): WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2024-6670](https://insights.sbomify.com/CVE-2024-6670/): Progress WhatsUp Gold SQL Injection (critical 9.8, exploited in the wild)
- [CVE-2024-6669](https://insights.sbomify.com/CVE-2024-6669/): AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 5.5)
- [CVE-2024-6668](https://insights.sbomify.com/CVE-2024-6668/): profilepro <= 1.3 - Subscriber+ Stored Cross Site Scripting (medium 5.4)
- [CVE-2024-6667](https://insights.sbomify.com/CVE-2024-6667/): kbucket < 4.1.5 - Reflected XSS (medium 6.1)
- [CVE-2024-6666](https://insights.sbomify.com/CVE-2024-6666/): WP ERP <= 1.13.0 - Authenticated (Accounting Manager+) SQL Injection via vendor_id (high 8.8)
- [CVE-2024-6665](https://insights.sbomify.com/CVE-2024-6665/): kbucket < 4.1.6 - Admin+ Stored XSS (medium 4.8)
- [CVE-2024-6662](https://insights.sbomify.com/CVE-2024-6662/): CSRF in MegaBIP (high 8.7)
- [CVE-2024-6661](https://insights.sbomify.com/CVE-2024-6661/): ParityPress <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2024-6660](https://insights.sbomify.com/CVE-2024-6660/): Missing authorization in Appointment Booking Calendar Plugin and Scheduling Plugin – BookingPress (high 8.8)
- [CVE-2024-6658](https://insights.sbomify.com/CVE-2024-6658/): Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection. (high 8.4)
- [CVE-2024-6657](https://insights.sbomify.com/CVE-2024-6657/): BLE peripheral DoS after few cycles of connect/disconnects (medium 6.5)
- [CVE-2024-6656](https://insights.sbomify.com/CVE-2024-6656/): Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software (high 8.8)
- [CVE-2024-6655](https://insights.sbomify.com/CVE-2024-6655/): Gtk3: gtk2: library injection from cwd (high 7.0)
- [CVE-2024-6654](https://insights.sbomify.com/CVE-2024-6654/): Denial of Service vulnerability in ESET products for macOS (medium 6.8)
- [CVE-2024-6653](https://insights.sbomify.com/CVE-2024-6653/): code-projects Simple Task List Login loginForm.php sql injection (medium 6.9)
- [CVE-2024-6652](https://insights.sbomify.com/CVE-2024-6652/): itsourcecode Gym Management System manage_member.php sql injection (medium 5.3)
- [CVE-2024-6651](https://insights.sbomify.com/CVE-2024-6651/): WordPress File Upload < 4.24.8 - Reflected XSS (medium 6.1)
- [CVE-2024-6650](https://insights.sbomify.com/CVE-2024-6650/): SourceCodester Employee and Visitor Gate Pass Logging System Master.php save_designation cross site scripting (medium 5.1)
- [CVE-2024-6649](https://insights.sbomify.com/CVE-2024-6649/): SourceCodester Employee and Visitor Gate Pass Logging System Users.php save_users cross-site request forgery (medium 6.9)
- [CVE-2024-6648](https://insights.sbomify.com/CVE-2024-6648/): Path Traversal in AP Page Builder (high 8.7)
- [CVE-2024-6647](https://insights.sbomify.com/CVE-2024-6647/): Croogo Setting Theme unrestricted upload (medium 5.1)
- [CVE-2024-6646](https://insights.sbomify.com/CVE-2024-6646/): Netgear WN604 Web Interface downloadFile.php information disclosure (medium 6.9)
- [CVE-2024-6645](https://insights.sbomify.com/CVE-2024-6645/): WuKongOpenSource Wukong_nocode AviatorScript ExpressionUtil.java deserialization (medium 5.3)
- [CVE-2024-6644](https://insights.sbomify.com/CVE-2024-6644/): zmops ArgusDBM AviatorScript CalculateAlarm.java getDefaultClassLoader deserialization (medium 5.3)
- [CVE-2024-6641](https://insights.sbomify.com/CVE-2024-6641/): WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration (medium 5.3)
- [CVE-2024-6640](https://insights.sbomify.com/CVE-2024-6640/): pf incorrectly matches different ICMPv6 states in the state table (medium 6.3)
- [CVE-2024-6639](https://insights.sbomify.com/CVE-2024-6639/): MDx <= 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via mdx_list_item Shortcode (medium 6.4)
- [CVE-2024-6638](https://insights.sbomify.com/CVE-2024-6638/): Integer Overflow Vulnerability Reading TDMS Files in LabVIEW (medium 5.5)
- [CVE-2024-6637](https://insights.sbomify.com/CVE-2024-6637/): WooCommerce - Social Login <= 2.7.3 - Unauthenticated Privilege Escalation via One-Time Password (high 7.3)
- [CVE-2024-6636](https://insights.sbomify.com/CVE-2024-6636/): WooCommerce - Social Login <= 2.7.3 - Missing Authorization to Unauthenticated Privilege Escalation (critical 9.8)
- [CVE-2024-6635](https://insights.sbomify.com/CVE-2024-6635/): WooCommerce - Social Login <= 2.7.3 - Unauthenticated Authentication Bypass (high 7.3)
- [CVE-2024-6634](https://insights.sbomify.com/CVE-2024-6634/): Cross-site scripting in Master Currency WP (medium 6.4)
- [CVE-2024-6633](https://insights.sbomify.com/CVE-2024-6633/): Insecure Default in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) (critical 9.8)
- [CVE-2024-6632](https://insights.sbomify.com/CVE-2024-6632/): SQL Injection in FileCatalyst Workflow 5.1.6 Build 139 (and earlier) (high 7.2)
- [CVE-2024-6631](https://insights.sbomify.com/CVE-2024-6631/): ImageRecycle pdf & image compression <= 3.1.14 - Missing Authorization in Several AJAX Actions (medium 5.0)
- [CVE-2024-6629](https://insights.sbomify.com/CVE-2024-6629/): All-in-One Video Gallery <= 3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Shortcode (medium 6.4)
- [CVE-2024-6628](https://insights.sbomify.com/CVE-2024-6628/): EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Cross-Site Request Forgery (medium 4.3)
- [CVE-2024-6627](https://insights.sbomify.com/CVE-2024-6627/): Happy Addons for Elementor <= 3.11.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via PDF View Widget (medium 6.4)
- [CVE-2024-6626](https://insights.sbomify.com/CVE-2024-6626/): EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization (medium 5.3)
- [CVE-2024-6625](https://insights.sbomify.com/CVE-2024-6625/): WP Total Branding <= 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via title Parameter (medium 5.5)
- [CVE-2024-6624](https://insights.sbomify.com/CVE-2024-6624/): JSON API User <= 3.9.3 - Unauthenticated Privilege Escalation (critical 9.8)
- [CVE-2024-6621](https://insights.sbomify.com/CVE-2024-6621/): WP RSS Aggregator <= 4.23.11 - Missing Authorization to Authenticated (Subscriber+) Feed State Update (medium 4.3)
- [CVE-2024-6620](https://insights.sbomify.com/CVE-2024-6620/): Cross-site scripting in PC42t, PC42tp, and PC42d (Common Firmware) (low 3.5)
- [CVE-2024-6619](https://insights.sbomify.com/CVE-2024-6619/): Incorrect Permission Assignment for Critical Resource in Ocean Data Systems Dream Report (high 8.5)
- [CVE-2024-6618](https://insights.sbomify.com/CVE-2024-6618/): Path Traversal in Ocean Data Systems Dream Report (high 8.5)
- [CVE-2024-6617](https://insights.sbomify.com/CVE-2024-6617/): NinjaTeam Header Footer Custom Code <= 1.2 - Admin+ Stored XSS via CSS Styles (medium 4.8)
- [CVE-2024-6615](https://insights.sbomify.com/CVE-2024-6615/): Memory safety bugs fixed in Firefox 128 and Thunderbird 128 (high 8.8)
- [CVE-2024-6614](https://insights.sbomify.com/CVE-2024-6614/): Incorrect listing of stack frames (medium 4.3)
- [CVE-2024-6613](https://insights.sbomify.com/CVE-2024-6613/): Incorrect listing of stack frames (medium 5.5)
- [CVE-2024-6612](https://insights.sbomify.com/CVE-2024-6612/): CSP violation leakage when using devtools (medium 5.3)
- [CVE-2024-6611](https://insights.sbomify.com/CVE-2024-6611/): Incorrect handling of SameSite cookies (critical 9.8)
- [CVE-2024-6610](https://insights.sbomify.com/CVE-2024-6610/): Form validation popups could block exiting full-screen mode (medium 6.3)
- [CVE-2024-6609](https://insights.sbomify.com/CVE-2024-6609/): Memory corruption in NSS (high 8.8)
- [CVE-2024-6608](https://insights.sbomify.com/CVE-2024-6608/): Cursor could be moved out of the viewport using pointerlock. (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/167/