# Vulnerabilities published in 2024


- [CVE-2024-5855](https://insights.sbomify.com/CVE-2024-5855/): Media Hygiene <= 3.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion (medium 4.3)
- [CVE-2024-5853](https://insights.sbomify.com/CVE-2024-5853/): Image Optimizer, Resizer and CDN – Sirv <= 7.2.6 - Authenticated (Contributor+) Arbitrary File Upload (critical 9.9)
- [CVE-2024-5852](https://insights.sbomify.com/CVE-2024-5852/): WordPress File Upload <= 4.24.7 - Authenticated (Contributor+) Directory Traversal (medium 4.3)
- [CVE-2024-5851](https://insights.sbomify.com/CVE-2024-5851/): playSMS SMS Schedule cross site scripting (medium 5.3)
- [CVE-2024-5849](https://insights.sbomify.com/CVE-2024-5849/): Pepperl+Fuchs: Device Master ICDM-RX/* XSS vulnerability allows reflected XSS (high 7.1)
- [CVE-2024-5848](https://insights.sbomify.com/CVE-2024-5848/): Reflected Cross-Site Scripting (XSS) in Multiple WSO2 Products Due to Improper Input Validation (medium 6.1)
- [CVE-2024-5847](https://insights.sbomify.com/CVE-2024-5847/): Use after free in Chrome (high 8.8)
- [CVE-2024-5846](https://insights.sbomify.com/CVE-2024-5846/): Use after free in Chrome (high 8.8)
- [CVE-2024-5845](https://insights.sbomify.com/CVE-2024-5845/): Use after free in Chrome (high 8.8)
- [CVE-2024-5844](https://insights.sbomify.com/CVE-2024-5844/): Memory corruption in Chrome (high 8.8)
- [CVE-2024-5843](https://insights.sbomify.com/CVE-2024-5843/): Security feature bypass in Chrome (high 8.8)
- [CVE-2024-5842](https://insights.sbomify.com/CVE-2024-5842/): Use after free in Chrome (high 7.5)
- [CVE-2024-5841](https://insights.sbomify.com/CVE-2024-5841/): Use after free in Chrome (high 8.8)
- [CVE-2024-58400](https://insights.sbomify.com/CVE-2024-58400/): llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs (high 8.8)
- [CVE-2024-5840](https://insights.sbomify.com/CVE-2024-5840/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2024-58399](https://insights.sbomify.com/CVE-2024-58399/): llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets (medium 6.9)
- [CVE-2024-58398](https://insights.sbomify.com/CVE-2024-58398/): Coder 2.3.1 before 2.16.1 Open Redirect via Login Page redirect Parameter (medium 5.3)
- [CVE-2024-58397](https://insights.sbomify.com/CVE-2024-58397/): MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters (medium 6.9)
- [CVE-2024-58396](https://insights.sbomify.com/CVE-2024-58396/): YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId (high 8.7)
- [CVE-2024-58394](https://insights.sbomify.com/CVE-2024-58394/): Retool < 3.88.0 XSS via /api/imageProxy SVG Proxying (medium 5.1)
- [CVE-2024-58393](https://insights.sbomify.com/CVE-2024-58393/): i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php (high 8.8)
- [CVE-2024-58392](https://insights.sbomify.com/CVE-2024-58392/): PhysicsFS through 3.2.0 Out-of-Bounds Read via __PHYSFS_utf8codepoint (medium 4.8)
- [CVE-2024-58391](https://insights.sbomify.com/CVE-2024-58391/): Frappe before 15.4.0 XSS via Printview Parameters (medium 5.3)
- [CVE-2024-58390](https://insights.sbomify.com/CVE-2024-58390/): Frappe before 15.41.0 Privilege Escalation via Document Action (high 8.7)
- [CVE-2024-5839](https://insights.sbomify.com/CVE-2024-5839/): Memory corruption in Chrome (high 8.8)
- [CVE-2024-58389](https://insights.sbomify.com/CVE-2024-58389/): HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next Parameter (medium 5.1)
- [CVE-2024-58388](https://insights.sbomify.com/CVE-2024-58388/): Sharp Multifunction Printers Local File Inclusion via installed_emanual_down.html (high 8.7)
- [CVE-2024-58387](https://insights.sbomify.com/CVE-2024-58387/): Inspur HCM Cloud Arbitrary File Read via file/download Endpoint (high 8.7)
- [CVE-2024-58386](https://insights.sbomify.com/CVE-2024-58386/): ZoneMinder 1.37.x Path Traversal via files view (high 7.1)
- [CVE-2024-58385](https://insights.sbomify.com/CVE-2024-58385/): Yonyou U8 CRM SQL Injection via fillbacksettingedit.php (critical 9.3)
- [CVE-2024-58384](https://insights.sbomify.com/CVE-2024-58384/): Tornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient (medium 6.3)
- [CVE-2024-58383](https://insights.sbomify.com/CVE-2024-58383/): Froxlor before 2.2.0 Insecure File Permissions mysql.conf (high 8.4)
- [CVE-2024-58382](https://insights.sbomify.com/CVE-2024-58382/): league/commonmark before 2.6.0 Denial of Service via Quadratic Complexity (high 8.7)
- [CVE-2024-58381](https://insights.sbomify.com/CVE-2024-58381/): PocketMine-MP before 5.11.1 Denial of Service via LoginPacket (high 8.7)
- [CVE-2024-58380](https://insights.sbomify.com/CVE-2024-58380/): PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket (high 7.1)
- [CVE-2024-5838](https://insights.sbomify.com/CVE-2024-5838/): Memory corruption in Chrome (high 8.8)
- [CVE-2024-58379](https://insights.sbomify.com/CVE-2024-58379/): nodemailer before 6.9.9 ReDoS via attachDataUrls parameter (medium 6.9)
- [CVE-2024-58376](https://insights.sbomify.com/CVE-2024-58376/): Renovate 37.158.0 before 37.199.0 Command Injection via helmv3 (high 8.4)
- [CVE-2024-58375](https://insights.sbomify.com/CVE-2024-58375/): OpenTofu before 1.8.3 Secret Variable Leaking via Static Evaluation (high 8.7)
- [CVE-2024-58374](https://insights.sbomify.com/CVE-2024-58374/): Hongjing e-HR Unauthenticated SQL Injection via getSdutyTree (high 8.7)
- [CVE-2024-58370](https://insights.sbomify.com/CVE-2024-58370/): SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service (high 7.1)
- [CVE-2024-5837](https://insights.sbomify.com/CVE-2024-5837/): Memory corruption in Chrome (high 8.8)
- [CVE-2024-58369](https://insights.sbomify.com/CVE-2024-58369/): SurrealDB before 1.1.1 Denial of Service via Global Parameters (high 7.1)
- [CVE-2024-58368](https://insights.sbomify.com/CVE-2024-58368/): SurrealDB before 1.1.0 Denial of Service via HTTP Headers (high 8.7)
- [CVE-2024-58367](https://insights.sbomify.com/CVE-2024-58367/): SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions (high 7.1)
- [CVE-2024-58366](https://insights.sbomify.com/CVE-2024-58366/): SurrealDB before 1.1.1 Format String via Scripting Functions (critical 9.0)
- [CVE-2024-58365](https://insights.sbomify.com/CVE-2024-58365/): SurrealDB before 1.2.0 Denial of Service via Nonexistent Function (high 7.1)
- [CVE-2024-58364](https://insights.sbomify.com/CVE-2024-58364/): SurrealDB before 1.2.1 Denial of Service via Parsing Error (high 7.1)
- [CVE-2024-58363](https://insights.sbomify.com/CVE-2024-58363/): SurrealDB before 1.5.4 Authentication Bypass via Database Switch (medium 5.3)
- [CVE-2024-58362](https://insights.sbomify.com/CVE-2024-58362/): SurrealDB before 1.5.5 Query Injection via RPC API (high 8.7)
- [CVE-2024-58361](https://insights.sbomify.com/CVE-2024-58361/): SurrealDB before 2.0.4 Denial of Service via Parser Exception (high 7.1)
- [CVE-2024-58360](https://insights.sbomify.com/CVE-2024-58360/): stoatchat before 0.7.8 Unrestricted Account Creation (medium 6.9)
- [CVE-2024-5836](https://insights.sbomify.com/CVE-2024-5836/): Code injection in Chrome (high 8.8)
- [CVE-2024-58359](https://insights.sbomify.com/CVE-2024-58359/): SurrealDB before 2.1.0 Denial of Service via rand() Sorting (high 7.1)
- [CVE-2024-58358](https://insights.sbomify.com/CVE-2024-58358/): SurrealDB before 2.1.0 Denial of Service via Nonexistent Role (medium 6.9)
- [CVE-2024-58357](https://insights.sbomify.com/CVE-2024-58357/): SurrealDB before 2.1.0 Denial of Service via rand::time() (high 7.1)
- [CVE-2024-58356](https://insights.sbomify.com/CVE-2024-58356/): SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE (low 2.3)
- [CVE-2024-58355](https://insights.sbomify.com/CVE-2024-58355/): Cal.com through 4.7.15 Cross-Site Scripting via booking questions (critical 9.3)
- [CVE-2024-58354](https://insights.sbomify.com/CVE-2024-58354/): cal.com Repository Takeover via pull_request_target Workflow (high 8.5)
- [CVE-2024-58353](https://insights.sbomify.com/CVE-2024-58353/): Cal.com through 4.7.15 Cross-Site Scripting via booking questions (critical 9.3)
- [CVE-2024-58352](https://insights.sbomify.com/CVE-2024-58352/): Landray OA Unauthenticated HQL Injection via wechatLoginHelper.do (high 8.7)
- [CVE-2024-58351](https://insights.sbomify.com/CVE-2024-58351/): Flowise - Remote Code Execution via overrideConfig Parameter (critical 9.3)
- [CVE-2024-58350](https://insights.sbomify.com/CVE-2024-58350/): Ghidra < 11.2 - Use After Free in Sleigh Backend via Static Initialization Order (low 2.1)
- [CVE-2024-5835](https://insights.sbomify.com/CVE-2024-5835/): Memory corruption in Chrome (medium 4.2)
- [CVE-2024-58349](https://insights.sbomify.com/CVE-2024-58349/): WordPress Theme Travelscape 1.0.3 Arbitrary File Upload (critical 9.3)
- [CVE-2024-58348](https://insights.sbomify.com/CVE-2024-58348/): WordPress Background Image Cropper 1.2 Remote Code Execution (critical 9.3)
- [CVE-2024-58344](https://insights.sbomify.com/CVE-2024-58344/): Carbon Forum 5.9.0 Persistent XSS via Forum Name Field (medium 5.1)
- [CVE-2024-58343](https://insights.sbomify.com/CVE-2024-58343/): Auth bypass in Helpdesk (medium 4.3)
- [CVE-2024-58342](https://insights.sbomify.com/CVE-2024-58342/): XenForo Open Redirect via getDynamicRedirect (medium 5.3)
- [CVE-2024-58341](https://insights.sbomify.com/CVE-2024-58341/): OpenCart Core 4.0.2.3 SQL Injection via search Parameter (high 8.8)
- [CVE-2024-58340](https://insights.sbomify.com/CVE-2024-58340/): LangChain <= 0.3.1 MRKLOutputParser ReDoS (high 8.7)
- [CVE-2024-5834](https://insights.sbomify.com/CVE-2024-5834/): Code injection in Chrome (medium 5.6)
- [CVE-2024-58339](https://insights.sbomify.com/CVE-2024-58339/): LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion (high 8.7)
- [CVE-2024-58338](https://insights.sbomify.com/CVE-2024-58338/): Anevia Flamingo XL 3.2.9 Remote Root Jailbreak via Traceroute Command (high 8.6)
- [CVE-2024-58337](https://insights.sbomify.com/CVE-2024-58337/): Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI (high 8.7)
- [CVE-2024-58336](https://insights.sbomify.com/CVE-2024-58336/): Akuvox Smart Intercom S539 Unauthenticated Video Stream Disclosure (high 8.7)
- [CVE-2024-58335](https://insights.sbomify.com/CVE-2024-58335/): XML external entity in OpenXRechnungToolbox (medium 5.0)
- [CVE-2024-58330](https://insights.sbomify.com/CVE-2024-58330/): Missing authorization in Camera Firmware (high 7.5)
- [CVE-2024-5833](https://insights.sbomify.com/CVE-2024-5833/): Memory corruption in Chrome (high 8.8)
- [CVE-2024-58323](https://insights.sbomify.com/CVE-2024-58323/): Kentico Xperience <= 13.0.158 Checkbox Form Component Stored XSS (medium 5.1)
- [CVE-2024-58322](https://insights.sbomify.com/CVE-2024-58322/): Kentico Xperience <= 13.0.158 Shipping Options Stored XSS (medium 5.1)
- [CVE-2024-58321](https://insights.sbomify.com/CVE-2024-58321/): Kentico Xperience <= 13.0.159 Form Validation Stored XSS (medium 5.1)
- [CVE-2024-58320](https://insights.sbomify.com/CVE-2024-58320/): Kentico Xperience <= 13.0.159 Authentication Information Disclosure (medium 6.9)
- [CVE-2024-5832](https://insights.sbomify.com/CVE-2024-5832/): Use after free in Chrome (high 8.8)
- [CVE-2024-58319](https://insights.sbomify.com/CVE-2024-58319/): Kentico Xperience <= 13.0.160 Pages Dashboard Widget Reflected XSS (medium 5.1)
- [CVE-2024-58318](https://insights.sbomify.com/CVE-2024-58318/): Kentico Xperience <= 13.0.162 Rich Text Editor Stored XSS (medium 5.1)
- [CVE-2024-58317](https://insights.sbomify.com/CVE-2024-58317/): Kentico Xperience <= 13.0.164 Cookie Security Configuration (medium 6.9)
- [CVE-2024-58316](https://insights.sbomify.com/CVE-2024-58316/): Online Shopping System Advanced 1.0 SQL Injection via Payment Success Parameter (high 8.7)
- [CVE-2024-58315](https://insights.sbomify.com/CVE-2024-58315/): Tosibox Key Service 3.3.0 Local Privilege Escalation via Unquoted Service Path (high 8.5)
- [CVE-2024-58314](https://insights.sbomify.com/CVE-2024-58314/): Atcom 2.7.x.x Authenticated Command Injection via Web Configuration CGI (high 8.7)
- [CVE-2024-58313](https://insights.sbomify.com/CVE-2024-58313/): xbtitFM 4.1.18 Insecure File Upload in file_hosting Feature (high 8.6)
- [CVE-2024-58312](https://insights.sbomify.com/CVE-2024-58312/): xbtitFM 4.1.18 Unauthenticated Path Traversal in nfogen.php (high 8.7)
- [CVE-2024-58311](https://insights.sbomify.com/CVE-2024-58311/): Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness (high 8.7)
- [CVE-2024-58310](https://insights.sbomify.com/CVE-2024-58310/): APC Network Management Card 4 Path Traversal via Directory Traversal (high 8.7)
- [CVE-2024-5831](https://insights.sbomify.com/CVE-2024-5831/): Use after free in Chrome (high 8.8)
- [CVE-2024-58309](https://insights.sbomify.com/CVE-2024-58309/): xbtitFM 4.1.18 Unauthenticated SQL Injection in shoutedit.php (high 8.7)
- [CVE-2024-58308](https://insights.sbomify.com/CVE-2024-58308/): Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login (critical 9.3)
- [CVE-2024-58307](https://insights.sbomify.com/CVE-2024-58307/): CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint (critical 9.3)
- [CVE-2024-58306](https://insights.sbomify.com/CVE-2024-58306/): minaliC 2.0.0 Denial of Service Vulnerability via Large GET Request (high 8.7)
- [CVE-2024-58305](https://insights.sbomify.com/CVE-2024-58305/): WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/175/