# Vulnerabilities published in 2024


- [CVE-2024-55657](https://insights.sbomify.com/CVE-2024-55657/): SiYuan has an arbitrary file read via /api/template/render (high 8.7)
- [CVE-2024-55656](https://insights.sbomify.com/CVE-2024-55656/): RedisBloom Integer Overflow Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-55655](https://insights.sbomify.com/CVE-2024-55655/): sigstore-python has insufficient validation of integration timestamp during verification (low 2.7)
- [CVE-2024-55653](https://insights.sbomify.com/CVE-2024-55653/): pwndoc's UnhandledPromiseRejection on audits causes Denial of Service (DoS) (medium 6.5)
- [CVE-2024-55652](https://insights.sbomify.com/CVE-2024-55652/): PwnDoc Server-Side Template Injection vulnerability - Sandbox Escape to RCE using custom filters (medium 6.5)
- [CVE-2024-55651](https://insights.sbomify.com/CVE-2024-55651/): i-Educar Stored Cross-Site Scripting vulnerability (low 2.0)
- [CVE-2024-5565](https://insights.sbomify.com/CVE-2024-5565/): Prompt Injection in "ask" API with visualization leads to RCE (high 8.1)
- [CVE-2024-55642](https://insights.sbomify.com/CVE-2024-55642/): block: Prevent potential deadlocks in zone write plug error recovery (medium 5.5)
- [CVE-2024-55641](https://insights.sbomify.com/CVE-2024-55641/): xfs: unlock inodes when erroring out of xfs_trans_alloc_dir (medium 5.5)
- [CVE-2024-5564](https://insights.sbomify.com/CVE-2024-5564/): Libndp: buffer overflow in route information length field (high 8.1)
- [CVE-2024-55639](https://insights.sbomify.com/CVE-2024-55639/): net: renesas: rswitch: avoid use-after-put for a device tree node (high 8.4)
- [CVE-2024-55638](https://insights.sbomify.com/CVE-2024-55638/): Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008 (critical 9.8)
- [CVE-2024-55637](https://insights.sbomify.com/CVE-2024-55637/): Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-007 (critical 9.8)
- [CVE-2024-55636](https://insights.sbomify.com/CVE-2024-55636/): Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 (critical 9.8)
- [CVE-2024-55635](https://insights.sbomify.com/CVE-2024-55635/): Drupal core - Critical - Cross Site Scripting - SA-CORE-2024-005 (medium 6.1)
- [CVE-2024-55634](https://insights.sbomify.com/CVE-2024-55634/): Drupal core - Moderately critical - Access bypass - SA-CORE-2024-004 (high 8.1)
- [CVE-2024-55633](https://insights.sbomify.com/CVE-2024-55633/): Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access (high 7.1)
- [CVE-2024-55632](https://insights.sbomify.com/CVE-2024-55632/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2024-55631](https://insights.sbomify.com/CVE-2024-55631/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2024-55630](https://insights.sbomify.com/CVE-2024-55630/): DOM Clobbering leads to temporary DOS in the note viewer in Joplin (low 3.3)
- [CVE-2024-5563](https://insights.sbomify.com/CVE-2024-5563/): Incomplete reCaptcha Implementation in Authentication Flows in WSO2 Identity Server Allows Brute Force Attacks (medium 4.8)
- [CVE-2024-55629](https://insights.sbomify.com/CVE-2024-55629/): Suricata generic detection bypass using TCP urgent support (high 7.5)
- [CVE-2024-55628](https://insights.sbomify.com/CVE-2024-55628/): Suricata oversized resource names utilizing DNS name compression can lead to resource starvation (high 7.5)
- [CVE-2024-55627](https://insights.sbomify.com/CVE-2024-55627/): Suricata segfault on StreamingBufferSlideToOffsetWithRegions (medium 5.9)
- [CVE-2024-55626](https://insights.sbomify.com/CVE-2024-55626/): Suricata oversized bpf file can lead to buffer overflow (low 3.3)
- [CVE-2024-5561](https://insights.sbomify.com/CVE-2024-5561/): Popup Maker < 1.19.1 - Admin+ Stored XSS (medium 4.8)
- [CVE-2024-55605](https://insights.sbomify.com/CVE-2024-55605/): Suricata allows stack overflow in transforms (high 7.5)
- [CVE-2024-55604](https://insights.sbomify.com/CVE-2024-55604/): Appsmith's Broken Access Control Allows Viewer Role User to Query Datasources (medium 4.8)
- [CVE-2024-55603](https://insights.sbomify.com/CVE-2024-55603/): Insufficient session invalidation in Kanboard (medium 6.5)
- [CVE-2024-55602](https://insights.sbomify.com/CVE-2024-55602/): PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal (high 7.6)
- [CVE-2024-55601](https://insights.sbomify.com/CVE-2024-55601/): Hugo does not escape some attributes in internal templates (medium 5.3)
- [CVE-2024-5560](https://insights.sbomify.com/CVE-2024-5560/): Memory corruption in Sage 1410 (medium 5.3)
- [CVE-2024-55599](https://insights.sbomify.com/CVE-2024-55599/): Security feature bypass in FortiOS (medium 4.9)
- [CVE-2024-55597](https://insights.sbomify.com/CVE-2024-55597/): Path traversal in FortiWeb (medium 5.2)
- [CVE-2024-55594](https://insights.sbomify.com/CVE-2024-55594/): Code injection in FortiWeb (medium 5.5)
- [CVE-2024-55593](https://insights.sbomify.com/CVE-2024-55593/): SQL injection in FortiWeb (low 2.6)
- [CVE-2024-55592](https://insights.sbomify.com/CVE-2024-55592/): Missing authorization in FortiSIEM (low 3.6)
- [CVE-2024-55591](https://insights.sbomify.com/CVE-2024-55591/): Fortinet FortiOS and FortiProxy Authentication Bypass (critical 9.6, exploited in the wild)
- [CVE-2024-55590](https://insights.sbomify.com/CVE-2024-55590/): Command injection in FortiIsolator (high 8.6)
- [CVE-2024-5559](https://insights.sbomify.com/CVE-2024-5559/): Weak cryptography in PowerLogic P5 (medium 6.1)
- [CVE-2024-55587](https://insights.sbomify.com/CVE-2024-55587/): python-libarchive directory traversal (high 8.8)
- [CVE-2024-55586](https://insights.sbomify.com/CVE-2024-55586/): Nette Database through 3.2.4 allows SQL injection in certain situations involving an untrusted filter that is directly passed to the where method. (critical 9.8)
- [CVE-2024-55585](https://insights.sbomify.com/CVE-2024-55585/): Missing authorization in moPS (critical 9.0)
- [CVE-2024-55582](https://insights.sbomify.com/CVE-2024-55582/): Oxide before 6 has unencrypted Control Plane datastores. (medium 5.7)
- [CVE-2024-55581](https://insights.sbomify.com/CVE-2024-55581/): Security feature bypass in adacore:ada web server (high 7.4)
- [CVE-2024-55580](https://insights.sbomify.com/CVE-2024-55580/): An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. (high 7.5)
- [CVE-2024-5558](https://insights.sbomify.com/CVE-2024-5558/): Race condition in SpaceLogic AS-B (medium 6.4)
- [CVE-2024-55579](https://insights.sbomify.com/CVE-2024-55579/): An issue was discovered in Qlik Sense Enterprise for Windows before November 2024 IR. (high 8.8)
- [CVE-2024-55578](https://insights.sbomify.com/CVE-2024-55578/): Information disclosure in zammad:zammad (medium 4.3)
- [CVE-2024-55577](https://insights.sbomify.com/CVE-2024-55577/): Memory corruption in Linux Ratfor (high 7.0)
- [CVE-2024-55573](https://insights.sbomify.com/CVE-2024-55573/): SQL injection in centreon:centreon web (critical 9.1)
- [CVE-2024-55570](https://insights.sbomify.com/CVE-2024-55570/): /api/user/users in the web GUI for the Cubro EXA48200 network packet broker (build 20231025055018) fixed in V5.0R14.5P4-V3.3R1 allows remote (medium 5.4)
- [CVE-2024-5557](https://insights.sbomify.com/CVE-2024-5557/): Information disclosure in SpaceLogic AS-B (medium 4.5)
- [CVE-2024-55569](https://insights.sbomify.com/CVE-2024-55569/): Memory corruption in samsung:exynos 1080 firmware (high 7.5)
- [CVE-2024-55568](https://insights.sbomify.com/CVE-2024-55568/): Null dereference in samsung:exynos 1080 firmware (high 7.5)
- [CVE-2024-55567](https://insights.sbomify.com/CVE-2024-55567/): Memory corruption in insyde:insydeh2o (high 7.5)
- [CVE-2024-55566](https://insights.sbomify.com/CVE-2024-55566/): ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name derived from an unseeded RNG). (medium 6.6)
- [CVE-2024-55565](https://insights.sbomify.com/CVE-2024-55565/): Predictable results in nanoid generation when given non-integer values (medium 4.3)
- [CVE-2024-55564](https://insights.sbomify.com/CVE-2024-55564/): The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow. (critical 9.8)
- [CVE-2024-55563](https://insights.sbomify.com/CVE-2024-55563/): Denial of service in bitcoin:bitcoin core (medium 5.3)
- [CVE-2024-55560](https://insights.sbomify.com/CVE-2024-55560/): MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that persist after installation. (critical 9.8)
- [CVE-2024-5556](https://insights.sbomify.com/CVE-2024-5556/): SQL Injection (high 8.3)
- [CVE-2024-55557](https://insights.sbomify.com/CVE-2024-55557/): ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials. (critical 9.8)
- [CVE-2024-55556](https://insights.sbomify.com/CVE-2024-55556/): A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on th (critical 9.8)
- [CVE-2024-55555](https://insights.sbomify.com/CVE-2024-55555/): Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. (high 8.8)
- [CVE-2024-55554](https://insights.sbomify.com/CVE-2024-55554/): Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet. (medium 5.4)
- [CVE-2024-55553](https://insights.sbomify.com/CVE-2024-55553/): In FRRouting (FRR) before 10.3 from 6.0 onward, all routes are re-validated if the total size of an update received via RTR exceeds the inte (high 7.5)
- [CVE-2024-55551](https://insights.sbomify.com/CVE-2024-55551/): Code injection in JDBC driver (high 8.3)
- [CVE-2024-55550](https://insights.sbomify.com/CVE-2024-55550/): Mitel MiCollab Path Traversal (medium 4.4, exploited in the wild)
- [CVE-2024-5555](https://insights.sbomify.com/CVE-2024-5555/): Cross-site scripting in Element Pack – Widgets, Templates & Addons for Elementor (medium 6.4)
- [CVE-2024-55549](https://insights.sbomify.com/CVE-2024-55549/): Use after free in libxslt (high 7.8)
- [CVE-2024-55548](https://insights.sbomify.com/CVE-2024-55548/): Denial of Service (medium 6.9)
- [CVE-2024-55547](https://insights.sbomify.com/CVE-2024-55547/): Remote Command Execution via SNMP (critical 9.3)
- [CVE-2024-55546](https://insights.sbomify.com/CVE-2024-55546/): Stored Cross-Site Scripting (high 7.1)
- [CVE-2024-55545](https://insights.sbomify.com/CVE-2024-55545/): Reflected Cross-Site Scripting (high 7.1)
- [CVE-2024-55544](https://insights.sbomify.com/CVE-2024-55544/): Authenticated Command Injection (high 8.7)
- [CVE-2024-55543](https://insights.sbomify.com/CVE-2024-55543/): Privilege escalation in Acronis Cyber Protect 16 (high 7.3)
- [CVE-2024-55542](https://insights.sbomify.com/CVE-2024-55542/): Privilege escalation in Acronis Cyber Protect 16 (medium 4.4)
- [CVE-2024-55541](https://insights.sbomify.com/CVE-2024-55541/): Cross-site scripting in Acronis Cyber Protect 16 (low 3.1)
- [CVE-2024-55540](https://insights.sbomify.com/CVE-2024-55540/): Privilege escalation in Acronis Cyber Protect 16 (medium 6.6)
- [CVE-2024-5554](https://insights.sbomify.com/CVE-2024-5554/): Cross-site scripting in Element Pack – Widgets, Templates & Addons for Elementor (medium 6.4)
- [CVE-2024-55539](https://insights.sbomify.com/CVE-2024-55539/): Weak cryptography in Acronis Cyber Protect 16 (low 2.5)
- [CVE-2024-55538](https://insights.sbomify.com/CVE-2024-55538/): Missing authorization in Acronis True Image (medium 4.0)
- [CVE-2024-55532](https://insights.sbomify.com/CVE-2024-55532/): Apache Ranger: Improper Neutralization of Formula Elements in a CSV File (critical 9.8)
- [CVE-2024-5553](https://insights.sbomify.com/CVE-2024-5553/): Premium Addons for Elementor <= 4.10.33 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (medium 4.4)
- [CVE-2024-55529](https://insights.sbomify.com/CVE-2024-55529/): Code injection in zblogcn:z-blogphp (critical 9.8)
- [CVE-2024-5552](https://insights.sbomify.com/CVE-2024-5552/): ReDoS in kubeflow/kubeflow (high 7.5)
- [CVE-2024-55517](https://insights.sbomify.com/CVE-2024-55517/): An issue was discovered in the Interllect Core Search in Polaris FT Intellect Core Banking 9.5. (high 8.8)
- [CVE-2024-55516](https://insights.sbomify.com/CVE-2024-55516/): File upload in raisecom:msg1200 firmware (critical 9.1)
- [CVE-2024-55515](https://insights.sbomify.com/CVE-2024-55515/): File upload in raisecom:msg1200 firmware (critical 9.8)
- [CVE-2024-55514](https://insights.sbomify.com/CVE-2024-55514/): File upload in raisecom:msg1200 firmware (medium 6.3)
- [CVE-2024-55513](https://insights.sbomify.com/CVE-2024-55513/): File upload in raisecom:msg1200 firmware (critical 9.1)
- [CVE-2024-55511](https://insights.sbomify.com/CVE-2024-55511/): A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially (high 7.8)
- [CVE-2024-5551](https://insights.sbomify.com/CVE-2024-5551/): WP STAGING PRO - Backup Duplicator & Migration <= 5.6.0 - Cross-Site Request Forgery to Limited Local File Inclusion (high 7.5)
- [CVE-2024-55509](https://insights.sbomify.com/CVE-2024-55509/): SQL injection in codeastro:complaint management system (critical 9.8)
- [CVE-2024-55507](https://insights.sbomify.com/CVE-2024-55507/): Privilege escalation in codeastro:complaint management system (critical 9.8)
- [CVE-2024-55506](https://insights.sbomify.com/CVE-2024-55506/): Missing authorization in codeastro:complaint management system (high 8.8)
- [CVE-2024-55505](https://insights.sbomify.com/CVE-2024-55505/): Code injection in codeastro:complaint management system (high 8.8)
- [CVE-2024-55504](https://insights.sbomify.com/CVE-2024-55504/): An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote co (medium 5.5)
- [CVE-2024-55503](https://insights.sbomify.com/CVE-2024-55503/): Code injection in termius:termius (low 3.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/193/