# Vulnerabilities published in 2024


- [CVE-2024-52376](https://insights.sbomify.com/CVE-2024-52376/): WordPress Boat Rental Plugin for WordPress plugin <= 1.0.1 - Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2024-52375](https://insights.sbomify.com/CVE-2024-52375/): WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2024-52374](https://insights.sbomify.com/CVE-2024-52374/): WordPress Do That Task plugin <= 1.5.5 - Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2024-52373](https://insights.sbomify.com/CVE-2024-52373/): WordPress Devexhub Gallery plugin <= 2.0.1 - Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2024-52372](https://insights.sbomify.com/CVE-2024-52372/): WordPress Easy CSV Importer plugin <= 7.0.0 - Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2024-52371](https://insights.sbomify.com/CVE-2024-52371/): WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability (high 8.6)
- [CVE-2024-52370](https://insights.sbomify.com/CVE-2024-52370/): File upload in Hive Support (critical 9.9)
- [CVE-2024-5237](https://insights.sbomify.com/CVE-2024-5237/): Campcodes Complete Web-Based School Management System timetable_grade_wise.php sql injection (medium 5.3)
- [CVE-2024-52369](https://insights.sbomify.com/CVE-2024-52369/): WordPress KBucket plugin <= 4.2.2 - Arbitrary File Upload vulnerability (critical 9.9)
- [CVE-2024-52367](https://insights.sbomify.com/CVE-2024-52367/): IBM Concert Software information disclosure (medium 5.3)
- [CVE-2024-52366](https://insights.sbomify.com/CVE-2024-52366/): IBM Concert Software information disclosure (medium 5.9)
- [CVE-2024-52365](https://insights.sbomify.com/CVE-2024-52365/): IBM Cloud Pak for Business Automation cross-site scripting (medium 6.4)
- [CVE-2024-52364](https://insights.sbomify.com/CVE-2024-52364/): IBM Cloud Pak for Business Automation cross-site scripting (medium 5.4)
- [CVE-2024-52363](https://insights.sbomify.com/CVE-2024-52363/): IBM InfoSphere Information Server directory traversal (medium 6.5)
- [CVE-2024-52362](https://insights.sbomify.com/CVE-2024-52362/): IBM App Connect Enterprise Certified Container denial of service (medium 4.3)
- [CVE-2024-52361](https://insights.sbomify.com/CVE-2024-52361/): IBM Storage Defender - Resiliency Service information disclosure (medium 5.7)
- [CVE-2024-52360](https://insights.sbomify.com/CVE-2024-52360/): IBM Concert Software SQL injection (high 7.6)
- [CVE-2024-5236](https://insights.sbomify.com/CVE-2024-5236/): Campcodes Complete Web-Based School Management System teacher_salary_invoice1.php sql injection (medium 5.3)
- [CVE-2024-52359](https://insights.sbomify.com/CVE-2024-52359/): IBM Concert Software improper access controls (medium 4.3)
- [CVE-2024-52358](https://insights.sbomify.com/CVE-2024-52358/): WordPress Responsive Addons for Elementor plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52357](https://insights.sbomify.com/CVE-2024-52357/): WordPress LIQUID BLOCKS plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52356](https://insights.sbomify.com/CVE-2024-52356/): WordPress The Pack Elementor addons plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52355](https://insights.sbomify.com/CVE-2024-52355/): WordPress OSM – OpenStreetMap plugin <= 6.1.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52354](https://insights.sbomify.com/CVE-2024-52354/): WordPress Web Stories Widgets For Elementor plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52353](https://insights.sbomify.com/CVE-2024-52353/): WordPress Christian Science Bible Lesson Subjects plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52352](https://insights.sbomify.com/CVE-2024-52352/): WordPress Postcasa Shortcode plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52351](https://insights.sbomify.com/CVE-2024-52351/): WordPress BU Slideshow plugin <= 2.3.10 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52350](https://insights.sbomify.com/CVE-2024-52350/): WordPress CRM 2go plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-5235](https://insights.sbomify.com/CVE-2024-5235/): Campcodes Complete Web-Based School Management System teacher_salary_invoice.php sql injection (medium 5.3)
- [CVE-2024-52349](https://insights.sbomify.com/CVE-2024-52349/): WordPress Awesome Tool Tip plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52348](https://insights.sbomify.com/CVE-2024-52348/): WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52347](https://insights.sbomify.com/CVE-2024-52347/): Cross-site scripting in Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera (medium 6.5)
- [CVE-2024-52346](https://insights.sbomify.com/CVE-2024-52346/): WordPress SimpleGMaps plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52345](https://insights.sbomify.com/CVE-2024-52345/): WordPress ra_qrcode plugin <= 2.1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52344](https://insights.sbomify.com/CVE-2024-52344/): WordPress Provide Forex Signals plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52343](https://insights.sbomify.com/CVE-2024-52343/): WordPress OS Pricing Tables plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52342](https://insights.sbomify.com/CVE-2024-52342/): WordPress OS BXSlider plugin <= 2.6 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52341](https://insights.sbomify.com/CVE-2024-52341/): WordPress OS Our Team plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52340](https://insights.sbomify.com/CVE-2024-52340/): WordPress Photographer Connections plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-5234](https://insights.sbomify.com/CVE-2024-5234/): Campcodes Complete Web-Based School Management System teacher_salary_history1.php sql injection (medium 5.3)
- [CVE-2024-52339](https://insights.sbomify.com/CVE-2024-52339/): WordPress Mage Front End Forms plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-52338](https://insights.sbomify.com/CVE-2024-52338/): Apache Arrow R package: Arbitrary code execution when loading a malicious data file (critical 9.8)
- [CVE-2024-52337](https://insights.sbomify.com/CVE-2024-52337/): Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method (medium 5.5)
- [CVE-2024-52336](https://insights.sbomify.com/CVE-2024-52336/): Tuned: `script_pre` and `script_post` options allow to pass arbitrary scripts executed by root (high 7.8)
- [CVE-2024-52335](https://insights.sbomify.com/CVE-2024-52335/): SQL injection in syngo.plaza VB30E (critical 9.3)
- [CVE-2024-52334](https://insights.sbomify.com/CVE-2024-52334/): Weak cryptography in syngo.plaza VB30E (medium 6.3)
- [CVE-2024-52333](https://insights.sbomify.com/CVE-2024-52333/): Memory corruption in DCMTK (high 8.4)
- [CVE-2024-52332](https://insights.sbomify.com/CVE-2024-52332/): igb: Fix potential invalid memory access in igb_init_module() (high 7.1)
- [CVE-2024-52331](https://insights.sbomify.com/CVE-2024-52331/): ECOVACS lawnmowers and vacuums deterministic firmware encryption key (high 7.7)
- [CVE-2024-52330](https://insights.sbomify.com/CVE-2024-52330/): ECOVACS lawnmowers and vacuums do not properly validate TLS certificates (critical 9.5)
- [CVE-2024-5233](https://insights.sbomify.com/CVE-2024-5233/): Campcodes Complete Web-Based School Management System teacher_salary_details3.php sql injection (medium 5.3)
- [CVE-2024-52329](https://insights.sbomify.com/CVE-2024-52329/): ECOVACS HOME mobile app plugins do not properly validate TLS certificates (critical 9.5)
- [CVE-2024-52328](https://insights.sbomify.com/CVE-2024-52328/): ECOVACS lawnmowers and vacuums insecurely store audio warning files (low 1.8)
- [CVE-2024-52327](https://insights.sbomify.com/CVE-2024-52327/): ECOVACS lawnmower and vacuum cloud service live video PIN bypass (medium 6.0)
- [CVE-2024-52325](https://insights.sbomify.com/CVE-2024-52325/): ECOVACS robot lawnmowers and vacuums command injection (medium 5.8)
- [CVE-2024-52324](https://insights.sbomify.com/CVE-2024-52324/): Ruijie Reyee OS Use of Inherently Dangerous Function (critical 9.2)
- [CVE-2024-52323](https://insights.sbomify.com/CVE-2024-52323/): Sensitive Data Exposure (high 8.1)
- [CVE-2024-52322](https://insights.sbomify.com/CVE-2024-52322/): WebService::Xero 0.11 for Perl uses insecure rand() function for cryptographic functions (medium 5.5)
- [CVE-2024-52321](https://insights.sbomify.com/CVE-2024-52321/): Auth bypass in PocketWifi 809SH (medium 5.9)
- [CVE-2024-52320](https://insights.sbomify.com/CVE-2024-52320/): Planet Technology Planet WGS-804HPT Command Injection (critical 9.3)
- [CVE-2024-5232](https://insights.sbomify.com/CVE-2024-5232/): Campcodes Complete Web-Based School Management System teacher_salary_details2.php sql injection (medium 5.3)
- [CVE-2024-52319](https://insights.sbomify.com/CVE-2024-52319/): mm: use aligned address in clear_gigantic_page() (high 7.8)
- [CVE-2024-52318](https://insights.sbomify.com/CVE-2024-52318/): Apache Tomcat: Incorrect JSP tag recycling leads to XSS (medium 6.1)
- [CVE-2024-52317](https://insights.sbomify.com/CVE-2024-52317/): Apache Tomcat: Request/response mix-up with HTTP/2 (medium 6.5)
- [CVE-2024-52316](https://insights.sbomify.com/CVE-2024-52316/): Apache Tomcat: Authentication bypass when using Jakarta Authentication API (critical 9.8)
- [CVE-2024-52314](https://insights.sbomify.com/CVE-2024-52314/): data.all admin user may access potentially sensitive data stored by producers via logs (medium 6.9)
- [CVE-2024-52313](https://insights.sbomify.com/CVE-2024-52313/): data.all authenticated users can obtain incorrect object level authorizations (medium 5.3)
- [CVE-2024-52312](https://insights.sbomify.com/CVE-2024-52312/): data.all authenticated users can perform restricted operations against DataSets and Environments (medium 5.3)
- [CVE-2024-52311](https://insights.sbomify.com/CVE-2024-52311/): data.all does not invalidate authentication token upon user logout (medium 5.3)
- [CVE-2024-5231](https://insights.sbomify.com/CVE-2024-5231/): Campcodes Complete Web-Based School Management System teacher_salary_details.php sql injection (medium 5.3)
- [CVE-2024-52309](https://insights.sbomify.com/CVE-2024-52309/): SFTPGo allows administrators to restrict command execution from the EventManager (medium 5.1)
- [CVE-2024-52308](https://insights.sbomify.com/CVE-2024-52308/): Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer (high 8.0)
- [CVE-2024-52307](https://insights.sbomify.com/CVE-2024-52307/): authentik allows a timing attack due to missing constant time comparison for metrics view (medium 6.3)
- [CVE-2024-52306](https://insights.sbomify.com/CVE-2024-52306/): FileManager Deserialization of Untrusted Data (high 7.7)
- [CVE-2024-52305](https://insights.sbomify.com/CVE-2024-52305/): UnoPim Stored XSS : Cookie hijacking through Create User function (medium 6.5)
- [CVE-2024-52304](https://insights.sbomify.com/CVE-2024-52304/): aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions (medium 6.3)
- [CVE-2024-52303](https://insights.sbomify.com/CVE-2024-52303/): aiohttp memory leak when middleware is enabled when requesting a resource with a non-allowed method (high 8.7)
- [CVE-2024-52302](https://insights.sbomify.com/CVE-2024-52302/): common-user-management Unrestricted File Upload Leading to Remote Code Execution (RCE) (high 8.7)
- [CVE-2024-52301](https://insights.sbomify.com/CVE-2024-52301/): Laravel allows environment manipulation via query string (high 8.7)
- [CVE-2024-52300](https://insights.sbomify.com/CVE-2024-52300/): macro-pdfviewer has a XSS through the width parameter (critical 9.1)
- [CVE-2024-5230](https://insights.sbomify.com/CVE-2024-5230/): EnvaySoft FleetCart information disclosure (medium 6.9)
- [CVE-2024-52299](https://insights.sbomify.com/CVE-2024-52299/): The PDF viewer macro allows accessing any attachment without access right checks (high 7.5)
- [CVE-2024-52298](https://insights.sbomify.com/CVE-2024-52298/): macro-pdfviewer's preview in WYSIWYG editor allows accessing any PDF document as the last author (high 7.5)
- [CVE-2024-52297](https://insights.sbomify.com/CVE-2024-52297/): Tolgee's configuration all configuration properties leaked in public configuration DTO (critical 9.8)
- [CVE-2024-52296](https://insights.sbomify.com/CVE-2024-52296/): libosdp has a null pointer deref in osdp_reply_name (medium 6.5)
- [CVE-2024-52295](https://insights.sbomify.com/CVE-2024-52295/): DataEase has a forged JWT token vulnerability (critical 9.3)
- [CVE-2024-52294](https://insights.sbomify.com/CVE-2024-52294/): khoj has an IDOR in subscription management that allows unauthorized subscription modifications (medium 4.3)
- [CVE-2024-52293](https://insights.sbomify.com/CVE-2024-52293/): Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI (high 7.2)
- [CVE-2024-52292](https://insights.sbomify.com/CVE-2024-52292/): Craft Allows Attackers to Read Arbitrary System Files (high 7.7)
- [CVE-2024-52291](https://insights.sbomify.com/CVE-2024-52291/): Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution (high 8.5)
- [CVE-2024-52290](https://insights.sbomify.com/CVE-2024-52290/): Stored XSS in Configuration Key Functionality (medium 6.3)
- [CVE-2024-5229](https://insights.sbomify.com/CVE-2024-5229/): Cross-site scripting in Primary Addon for Elementor (medium 6.4)
- [CVE-2024-52289](https://insights.sbomify.com/CVE-2024-52289/): authentik has an insecure default configuration for OAuth2 Redirect URIs (high 7.9)
- [CVE-2024-52288](https://insights.sbomify.com/CVE-2024-52288/): RMAC revert to the beginning of the session in libosdp (medium 5.1)
- [CVE-2024-52287](https://insights.sbomify.com/CVE-2024-52287/): authentik performs insufficient validation of OAuth scopes (medium 6.4)
- [CVE-2024-52286](https://insights.sbomify.com/CVE-2024-52286/): Self Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDF (low 2.0)
- [CVE-2024-52285](https://insights.sbomify.com/CVE-2024-52285/): Missing authorization in SiPass integrated AC5102 (ACC-G2) (medium 6.9)
- [CVE-2024-52284](https://insights.sbomify.com/CVE-2024-52284/): Rancher Fleet Helm Values are stored inside BundleDeployment in plain text (high 7.7)
- [CVE-2024-52283](https://insights.sbomify.com/CVE-2024-52283/): Cross-site scripting in hackweek (medium 5.7)
- [CVE-2024-52282](https://insights.sbomify.com/CVE-2024-52282/): Rancher Helm Applications may have sensitive values leaked (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/215/