# Vulnerabilities published in 2024


- [CVE-2024-5463](https://insights.sbomify.com/CVE-2024-5463/): Memory corruption in Camera Firmware (medium 6.5)
- [CVE-2024-5462](https://insights.sbomify.com/CVE-2024-5462/): Brocade Fabric OS may capture SNMP Passwords in clear text (medium 5.3)
- [CVE-2024-5461](https://insights.sbomify.com/CVE-2024-5461/): Command or parameter injection via unique embedded switch SNMP commands. (high 8.6)
- [CVE-2024-5460](https://insights.sbomify.com/CVE-2024-5460/): Brocade Fabric OS versions prior to v9.0 have default community strings (high 8.1)
- [CVE-2024-5459](https://insights.sbomify.com/CVE-2024-5459/): Restaurant Menu and Food Ordering <= 2.4.16 - Missing Authorization to Menu Creation (medium 4.3)
- [CVE-2024-5458](https://insights.sbomify.com/CVE-2024-5458/): Filter bypass in filter_var (FILTER_VALIDATE_URL) (medium 5.3)
- [CVE-2024-5457](https://insights.sbomify.com/CVE-2024-5457/): Panda Video <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-54568](https://insights.sbomify.com/CVE-2024-54568/): Memory corruption in macOS (medium 4.3)
- [CVE-2024-54565](https://insights.sbomify.com/CVE-2024-54565/): Missing authorization in macOS (medium 6.2)
- [CVE-2024-54564](https://insights.sbomify.com/CVE-2024-54564/): Security feature bypass in iOS and iPadOS (medium 6.5)
- [CVE-2024-54560](https://insights.sbomify.com/CVE-2024-54560/): Business logic in iOS and iPadOS (medium 5.5)
- [CVE-2024-5456](https://insights.sbomify.com/CVE-2024-5456/): Panda Video <= 1.4.0 - Authenticated (Contributor+) Local File Inclusion (high 8.8)
- [CVE-2024-54559](https://insights.sbomify.com/CVE-2024-54559/): Missing authorization in macOS (medium 5.5)
- [CVE-2024-54558](https://insights.sbomify.com/CVE-2024-54558/): Other in iOS and iPadOS (low 2.8)
- [CVE-2024-54557](https://insights.sbomify.com/CVE-2024-54557/): Security feature bypass in macOS (high 7.5)
- [CVE-2024-54556](https://insights.sbomify.com/CVE-2024-54556/): Security feature bypass in iOS and iPadOS (low 2.4)
- [CVE-2024-54554](https://insights.sbomify.com/CVE-2024-54554/): Path traversal in macOS (medium 5.5)
- [CVE-2024-54551](https://insights.sbomify.com/CVE-2024-54551/): Memory corruption in Safari (high 7.5)
- [CVE-2024-54550](https://insights.sbomify.com/CVE-2024-54550/): Information disclosure in iOS and iPadOS (medium 4.0)
- [CVE-2024-5455](https://insights.sbomify.com/CVE-2024-5455/): Path traversal in The Plus Addons for Elementor Page Builder Pro (high 8.8)
- [CVE-2024-54549](https://insights.sbomify.com/CVE-2024-54549/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54547](https://insights.sbomify.com/CVE-2024-54547/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54546](https://insights.sbomify.com/CVE-2024-54546/): Memory corruption in macOS (high 7.5)
- [CVE-2024-54543](https://insights.sbomify.com/CVE-2024-54543/): Memory corruption in Safari (high 8.8)
- [CVE-2024-54542](https://insights.sbomify.com/CVE-2024-54542/): Missing authorization in Safari (critical 9.1)
- [CVE-2024-54541](https://insights.sbomify.com/CVE-2024-54541/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-54540](https://insights.sbomify.com/CVE-2024-54540/): Cross-site scripting in Apple Music (medium 5.5)
- [CVE-2024-54539](https://insights.sbomify.com/CVE-2024-54539/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-54538](https://insights.sbomify.com/CVE-2024-54538/): Denial of service in iOS and iPadOS (high 7.5)
- [CVE-2024-54537](https://insights.sbomify.com/CVE-2024-54537/): Security feature bypass in macOS (high 7.1)
- [CVE-2024-54536](https://insights.sbomify.com/CVE-2024-54536/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-54535](https://insights.sbomify.com/CVE-2024-54535/): Path traversal in iOS and iPadOS (medium 4.0)
- [CVE-2024-54534](https://insights.sbomify.com/CVE-2024-54534/): Memory corruption in Safari (high 8.8)
- [CVE-2024-54533](https://insights.sbomify.com/CVE-2024-54533/): Security feature bypass in macOS (high 7.0)
- [CVE-2024-54531](https://insights.sbomify.com/CVE-2024-54531/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-54530](https://insights.sbomify.com/CVE-2024-54530/): Auth bypass in iOS and iPadOS (critical 9.1)
- [CVE-2024-5453](https://insights.sbomify.com/CVE-2024-5453/): ProfileGrid <= 5.8.6 - Missing Authorization (medium 4.3)
- [CVE-2024-54529](https://insights.sbomify.com/CVE-2024-54529/): Security feature bypass in macOS (high 7.8)
- [CVE-2024-54528](https://insights.sbomify.com/CVE-2024-54528/): Business logic in macOS (high 7.1)
- [CVE-2024-54527](https://insights.sbomify.com/CVE-2024-54527/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-54526](https://insights.sbomify.com/CVE-2024-54526/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-54525](https://insights.sbomify.com/CVE-2024-54525/): Business logic in iOS and iPadOS (high 8.8)
- [CVE-2024-54524](https://insights.sbomify.com/CVE-2024-54524/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-54523](https://insights.sbomify.com/CVE-2024-54523/): Memory corruption in iOS and iPadOS (critical 9.1)
- [CVE-2024-54522](https://insights.sbomify.com/CVE-2024-54522/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2024-54520](https://insights.sbomify.com/CVE-2024-54520/): Path traversal in macOS (medium 5.5)
- [CVE-2024-5452](https://insights.sbomify.com/CVE-2024-5452/): RCE via Property/Class Pollution in lightning-ai/pytorch-lightning (critical 9.8)
- [CVE-2024-54519](https://insights.sbomify.com/CVE-2024-54519/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54518](https://insights.sbomify.com/CVE-2024-54518/): Memory corruption in iOS and iPadOS (medium 5.3)
- [CVE-2024-54517](https://insights.sbomify.com/CVE-2024-54517/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2024-54516](https://insights.sbomify.com/CVE-2024-54516/): Security feature bypass in macOS (low 3.3)
- [CVE-2024-54515](https://insights.sbomify.com/CVE-2024-54515/): Privilege escalation in macOS (high 7.8)
- [CVE-2024-54514](https://insights.sbomify.com/CVE-2024-54514/): Security feature bypass in iOS and iPadOS (high 8.2)
- [CVE-2024-54513](https://insights.sbomify.com/CVE-2024-54513/): Missing authorization in iOS and iPadOS (medium 5.7)
- [CVE-2024-54512](https://insights.sbomify.com/CVE-2024-54512/): Information disclosure in iOS and iPadOS (critical 9.1)
- [CVE-2024-54510](https://insights.sbomify.com/CVE-2024-54510/): Race condition in iOS and iPadOS (medium 5.1)
- [CVE-2024-5451](https://insights.sbomify.com/CVE-2024-5451/): Cross-site scripting in The7 — Website and eCommerce Builder for WordPress (medium 6.4)
- [CVE-2024-54509](https://insights.sbomify.com/CVE-2024-54509/): Memory corruption in macOS (high 7.8)
- [CVE-2024-54508](https://insights.sbomify.com/CVE-2024-54508/): Memory corruption in Safari (medium 6.5)
- [CVE-2024-54507](https://insights.sbomify.com/CVE-2024-54507/): Memory corruption in iOS and iPadOS (critical 9.1)
- [CVE-2024-54506](https://insights.sbomify.com/CVE-2024-54506/): Memory corruption in macOS (critical 9.8)
- [CVE-2024-54505](https://insights.sbomify.com/CVE-2024-54505/): Memory corruption in Safari (medium 6.5)
- [CVE-2024-54504](https://insights.sbomify.com/CVE-2024-54504/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54503](https://insights.sbomify.com/CVE-2024-54503/): Other in iOS and iPadOS (low 3.3)
- [CVE-2024-54502](https://insights.sbomify.com/CVE-2024-54502/): Memory corruption in Safari (medium 6.5)
- [CVE-2024-54501](https://insights.sbomify.com/CVE-2024-54501/): Denial of service in iOS and iPadOS (medium 5.5)
- [CVE-2024-54500](https://insights.sbomify.com/CVE-2024-54500/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-5450](https://insights.sbomify.com/CVE-2024-5450/): Bug Library < 2.1.1 - Unauthenticated RCE (critical 9.1)
- [CVE-2024-54499](https://insights.sbomify.com/CVE-2024-54499/): Use after free in iOS and iPadOS (high 8.1)
- [CVE-2024-54498](https://insights.sbomify.com/CVE-2024-54498/): Path traversal in macOS (high 8.8)
- [CVE-2024-54497](https://insights.sbomify.com/CVE-2024-54497/): Denial of service in iOS and iPadOS (medium 6.5)
- [CVE-2024-54495](https://insights.sbomify.com/CVE-2024-54495/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-54494](https://insights.sbomify.com/CVE-2024-54494/): Race condition in iOS and iPadOS (medium 5.9)
- [CVE-2024-54493](https://insights.sbomify.com/CVE-2024-54493/): Other in macOS (low 3.3)
- [CVE-2024-54492](https://insights.sbomify.com/CVE-2024-54492/): Weak cryptography in iOS and iPadOS (critical 9.8)
- [CVE-2024-54491](https://insights.sbomify.com/CVE-2024-54491/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54490](https://insights.sbomify.com/CVE-2024-54490/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-5449](https://insights.sbomify.com/CVE-2024-5449/): Missing authorization in WP Dark Mode – Improve Accessibility with AI Powered Dark Theme (medium 4.3)
- [CVE-2024-54489](https://insights.sbomify.com/CVE-2024-54489/): Path traversal in macOS (medium 5.3)
- [CVE-2024-54488](https://insights.sbomify.com/CVE-2024-54488/): Auth bypass in iOS and iPadOS (medium 5.3)
- [CVE-2024-54486](https://insights.sbomify.com/CVE-2024-54486/): Information disclosure in iOS and iPadOS (medium 6.5)
- [CVE-2024-54485](https://insights.sbomify.com/CVE-2024-54485/): Security feature bypass in iOS and iPadOS (medium 5.5)
- [CVE-2024-54484](https://insights.sbomify.com/CVE-2024-54484/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-5448](https://insights.sbomify.com/CVE-2024-5448/): PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Contributor+ Stored XSS (medium 6.1)
- [CVE-2024-54479](https://insights.sbomify.com/CVE-2024-54479/): Denial of service in Safari (high 7.5)
- [CVE-2024-54478](https://insights.sbomify.com/CVE-2024-54478/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2024-54477](https://insights.sbomify.com/CVE-2024-54477/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54476](https://insights.sbomify.com/CVE-2024-54476/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54475](https://insights.sbomify.com/CVE-2024-54475/): Information disclosure in macOS (low 3.3)
- [CVE-2024-54474](https://insights.sbomify.com/CVE-2024-54474/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54473](https://insights.sbomify.com/CVE-2024-54473/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54471](https://insights.sbomify.com/CVE-2024-54471/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-54470](https://insights.sbomify.com/CVE-2024-54470/): Security feature bypass in iOS and iPadOS (medium 4.6)
- [CVE-2024-5447](https://insights.sbomify.com/CVE-2024-5447/): PayPal Pay Now, Buy Now, Donation and Cart Buttons Shortcode <= 1.7 - Admin+ Stored XSS (medium 5.4)
- [CVE-2024-54469](https://insights.sbomify.com/CVE-2024-54469/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-54468](https://insights.sbomify.com/CVE-2024-54468/): Security feature bypass in iOS and iPadOS (high 8.2)
- [CVE-2024-54467](https://insights.sbomify.com/CVE-2024-54467/): Information disclosure in Safari (medium 6.5)
- [CVE-2024-54466](https://insights.sbomify.com/CVE-2024-54466/): Missing authorization in macOS (medium 6.5)
- [CVE-2024-54465](https://insights.sbomify.com/CVE-2024-54465/): Privilege escalation in macOS (critical 9.8)
- [CVE-2024-54463](https://insights.sbomify.com/CVE-2024-54463/): Security feature bypass in macOS (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/197/