# Vulnerabilities published in 2024


- [CVE-2024-47895](https://insights.sbomify.com/CVE-2024-47895/): GPU DDK - OOB read into fwlog due to unchecked block count (high 7.1)
- [CVE-2024-47894](https://insights.sbomify.com/CVE-2024-47894/): GPU DDK - Out of bounds read into fwlog due to unchecked loop bounds (high 7.1)
- [CVE-2024-47893](https://insights.sbomify.com/CVE-2024-47893/): GPU DDK - OOB read and write of the shared KMD/FW memory heap (VZ/TEE setups) (medium 6.5)
- [CVE-2024-47892](https://insights.sbomify.com/CVE-2024-47892/): GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA) (high 7.8)
- [CVE-2024-47891](https://insights.sbomify.com/CVE-2024-47891/): Use after free in Graphics DDK (high 7.8)
- [CVE-2024-4789](https://insights.sbomify.com/CVE-2024-4789/): Cost Calculator Builder Pro <= 3.1.72 - Authenticated (Subscriber+) Server-Side Request Forgery (medium 6.4)
- [CVE-2024-47889](https://insights.sbomify.com/CVE-2024-47889/): Action Mailer has possible ReDoS vulnerability in block_format (medium 6.6)
- [CVE-2024-47888](https://insights.sbomify.com/CVE-2024-47888/): Action Text has possible ReDoS vulnerability in plain_text_for_blockquote_node (medium 6.6)
- [CVE-2024-47887](https://insights.sbomify.com/CVE-2024-47887/): Action Controller has possible ReDoS vulnerability in HTTP Token authentication (medium 6.6)
- [CVE-2024-47886](https://insights.sbomify.com/CVE-2024-47886/): Chamilo: Post-Auth Remote Code Execution (high 8.7)
- [CVE-2024-47885](https://insights.sbomify.com/CVE-2024-47885/): astro's client-side router has DOM Clobbering Gadget that leads to XSS (medium 5.9)
- [CVE-2024-47884](https://insights.sbomify.com/CVE-2024-47884/): Insecure Temporary File in `foxmarks` (low 2.4)
- [CVE-2024-47883](https://insights.sbomify.com/CVE-2024-47883/): Butterfly has path/URL confusion in resource handling leading to multiple weaknesses (critical 9.1)
- [CVE-2024-47882](https://insights.sbomify.com/CVE-2024-47882/): OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project (medium 5.9)
- [CVE-2024-47881](https://insights.sbomify.com/CVE-2024-47881/): OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) (high 8.1)
- [CVE-2024-47880](https://insights.sbomify.com/CVE-2024-47880/): OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand (high 8.1)
- [CVE-2024-4788](https://insights.sbomify.com/CVE-2024-4788/): Boostify Header Footer Builder for Elementor <= 1.3.5 - Missing Authorization to Page/Post Creation (medium 4.3)
- [CVE-2024-47879](https://insights.sbomify.com/CVE-2024-47879/): OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) (high 7.6)
- [CVE-2024-47878](https://insights.sbomify.com/CVE-2024-47878/): Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) (high 8.1)
- [CVE-2024-47877](https://insights.sbomify.com/CVE-2024-47877/): Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. (medium 6.9)
- [CVE-2024-47876](https://insights.sbomify.com/CVE-2024-47876/): Sakai: Kernel users created with type roleview can login as a normal user (high 8.7)
- [CVE-2024-47875](https://insights.sbomify.com/CVE-2024-47875/): DOMPurify nesting-based mXSS (critical 10.0)
- [CVE-2024-47874](https://insights.sbomify.com/CVE-2024-47874/): Starlette Denial of service (DoS) via multipart/form-data (high 8.7)
- [CVE-2024-47873](https://insights.sbomify.com/CVE-2024-47873/): PhpSpreadsheet XmlScanner bypass leads to XXE (high 7.5)
- [CVE-2024-47872](https://insights.sbomify.com/CVE-2024-47872/): Cross-site Scripting on Gradio server via upload of HTML files, JS files, or SVG files (medium 6.9)
- [CVE-2024-47871](https://insights.sbomify.com/CVE-2024-47871/): Insecure communication between the FRP client and server in Gradio (high 8.2)
- [CVE-2024-47870](https://insights.sbomify.com/CVE-2024-47870/): Race condition in update_root_in_config may redirect user traffic in Gradio (high 7.1)
- [CVE-2024-4787](https://insights.sbomify.com/CVE-2024-4787/): Cost Calculator Builder PRO <= 3.1.75 - Unauthenticated Arbitrary Email Sending (medium 5.8)
- [CVE-2024-47869](https://insights.sbomify.com/CVE-2024-47869/): Non-constant-time comparison when comparing hashes in Gradio (low 2.3)
- [CVE-2024-47868](https://insights.sbomify.com/CVE-2024-47868/): Several components’ post-process steps may allow arbitrary file leaks in Gradio (medium 6.3)
- [CVE-2024-47867](https://insights.sbomify.com/CVE-2024-47867/): Lack of integrity check on the downloaded FRP client in Gradio (low 2.1)
- [CVE-2024-47866](https://insights.sbomify.com/CVE-2024-47866/): RGW DoS attack with empty HTTP header in S3 object copy (high 7.5)
- [CVE-2024-47865](https://insights.sbomify.com/CVE-2024-47865/): Missing authorization in Rakuten Turbo 5G (medium 5.3)
- [CVE-2024-47864](https://insights.sbomify.com/CVE-2024-47864/): Memory corruption in Wi-Fi STATION SH-52B (medium 5.3)
- [CVE-2024-47863](https://insights.sbomify.com/CVE-2024-47863/): An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, an (medium 6.2)
- [CVE-2024-4786](https://insights.sbomify.com/CVE-2024-4786/): Security feature bypass in Tab K10 (low 2.8)
- [CVE-2024-47857](https://insights.sbomify.com/CVE-2024-47857/): SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH (critical 9.8)
- [CVE-2024-47856](https://insights.sbomify.com/CVE-2024-47856/): Privilege escalation in rsa:authentication agent for windows (critical 9.8)
- [CVE-2024-47855](https://insights.sbomify.com/CVE-2024-47855/): JSON-lib mishandles an unbalanced comment string (medium 5.3)
- [CVE-2024-47854](https://insights.sbomify.com/CVE-2024-47854/): Cross-site scripting in veritas:data insight (medium 6.1)
- [CVE-2024-47853](https://insights.sbomify.com/CVE-2024-47853/): Privilege escalation in mahara:mahara (high 8.8)
- [CVE-2024-47850](https://insights.sbomify.com/CVE-2024-47850/): CUPS cups-browsed before 2.5b1 will send an HTTP POST request to an arbitrary destination and port in response to a single IPP UDP packet re (high 7.5)
- [CVE-2024-4785](https://insights.sbomify.com/CVE-2024-4785/): BT: Missing Check in LL_CONNECTION_UPDATE_IND Packet Leads to Division by Zero (high 7.6)
- [CVE-2024-47849](https://insights.sbomify.com/CVE-2024-47849/): Backticks can allow the usage of not-allowed SQL functions (high 8.8)
- [CVE-2024-47848](https://insights.sbomify.com/CVE-2024-47848/): User can review/unreview articles while blocked (medium 6.9)
- [CVE-2024-47847](https://insights.sbomify.com/CVE-2024-47847/): Various XSSes found in Cargo (medium 6.9)
- [CVE-2024-47846](https://insights.sbomify.com/CVE-2024-47846/): Special:DeleteCargoTable and Special:SwitchCargoTable have no CSRF protection (medium 6.9)
- [CVE-2024-47845](https://insights.sbomify.com/CVE-2024-47845/): CSS sanitizer used incorrectly, and is easily bypassed (medium 6.9)
- [CVE-2024-47841](https://insights.sbomify.com/CVE-2024-47841/): Path traversal when loading stylesheets (medium 6.9)
- [CVE-2024-47840](https://insights.sbomify.com/CVE-2024-47840/): Stored XSS through sidebar in Apex skin (medium 6.9)
- [CVE-2024-4784](https://insights.sbomify.com/CVE-2024-4784/): Authentication Bypass by Primary Weakness in GitLab (medium 4.2)
- [CVE-2024-47836](https://insights.sbomify.com/CVE-2024-47836/): Admidio vulnerable to HTML Injection In The Messages Section (low 3.5)
- [CVE-2024-47835](https://insights.sbomify.com/CVE-2024-47835/): GHSL-2024-263: Gstreamer NULL-pointer dereference in LRC subtitle parser (medium 6.8)
- [CVE-2024-47834](https://insights.sbomify.com/CVE-2024-47834/): GHSL-2024-280: Gstreamer Use-After-Free read in Matroska CodecPrivate (medium 5.1)
- [CVE-2024-47833](https://insights.sbomify.com/CVE-2024-47833/): Session Cookie without Secure and HTTPOnly flags in taipy (medium 6.3)
- [CVE-2024-47832](https://insights.sbomify.com/CVE-2024-47832/): XML Signature Bypass via differential XML parsing in ssoready (critical 9.3)
- [CVE-2024-47831](https://insights.sbomify.com/CVE-2024-47831/): Next.js image optimization has Denial of Service condition (medium 5.9)
- [CVE-2024-47830](https://insights.sbomify.com/CVE-2024-47830/): Plane allows server side request forgery via /_next/image endpoint (critical 9.3)
- [CVE-2024-4783](https://insights.sbomify.com/CVE-2024-4783/): jQuery T(-) Countdown Widget <= 2.3.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via tminus Shortcode (medium 6.4)
- [CVE-2024-47829](https://insights.sbomify.com/CVE-2024-47829/): pnpm uses the md5 path shortening function causes packet paths to coincide, which causes indirect packet overwriting (medium 6.5)
- [CVE-2024-47828](https://insights.sbomify.com/CVE-2024-47828/): Cross-Site Request Forgery in ampache (medium 5.3)
- [CVE-2024-47827](https://insights.sbomify.com/CVE-2024-47827/): Argo Workflows Controller: Denial of Service via malicious daemon Workflows (medium 5.7)
- [CVE-2024-47826](https://insights.sbomify.com/CVE-2024-47826/): eLabFTW vulnerable to HTML Injection in extended search error message (low 3.5)
- [CVE-2024-47825](https://insights.sbomify.com/CVE-2024-47825/): CIDR deny policies may not take effect when a more narrow CIDR allow is present (medium 4.0)
- [CVE-2024-47824](https://insights.sbomify.com/CVE-2024-47824/): Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room (high 8.7)
- [CVE-2024-47823](https://insights.sbomify.com/CVE-2024-47823/): Livewire Remote Code Execution (RCE) on File Uploads (high 7.7)
- [CVE-2024-47822](https://insights.sbomify.com/CVE-2024-47822/): Directus inserts access token from query string into logs (medium 4.2)
- [CVE-2024-47821](https://insights.sbomify.com/CVE-2024-47821/): pyLoad vulnerable to remote code execution by download to /.pyload/scripts using /flashgot API (critical 9.1)
- [CVE-2024-47820](https://insights.sbomify.com/CVE-2024-47820/): MarkUs vulnerable to Path Traversal (medium 5.7)
- [CVE-2024-4782](https://insights.sbomify.com/CVE-2024-4782/): Denial of service in Printers (medium 6.5)
- [CVE-2024-47819](https://insights.sbomify.com/CVE-2024-47819/): Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section (medium 4.2)
- [CVE-2024-47818](https://insights.sbomify.com/CVE-2024-47818/): Logged-in users with any role can delete arbitrary files in @saltcorn/server (medium 6.5)
- [CVE-2024-47817](https://insights.sbomify.com/CVE-2024-47817/): Unvalidated paragraph widget values can be used for Cross-site Scripting in lara-zeus (medium 5.3)
- [CVE-2024-47816](https://insights.sbomify.com/CVE-2024-47816/): Users can impersonate import requesters if their actor IDs coincide in ImportDump (medium 6.4)
- [CVE-2024-47815](https://insights.sbomify.com/CVE-2024-47815/): Cross-site Scripting in IncidentReporting (medium 6.0)
- [CVE-2024-47814](https://insights.sbomify.com/CVE-2024-47814/): use-after-free when closing buffers in Vim (low 3.9)
- [CVE-2024-47813](https://insights.sbomify.com/CVE-2024-47813/): Wasmtime race condition could lead to WebAssembly control-flow integrity and type safety violations (low 2.9)
- [CVE-2024-47812](https://insights.sbomify.com/CVE-2024-47812/): Cross-site Scripting (XSS) on Special:RequestImportQueue when displaying request date in ImportDump (medium 6.0)
- [CVE-2024-47810](https://insights.sbomify.com/CVE-2024-47810/): Use after free in Foxit Reader (high 8.8)
- [CVE-2024-4781](https://insights.sbomify.com/CVE-2024-4781/): Denial of service in Printers (medium 6.5)
- [CVE-2024-47809](https://insights.sbomify.com/CVE-2024-47809/): dlm: fix possible lkb_resource null dereference (medium 5.5)
- [CVE-2024-47808](https://insights.sbomify.com/CVE-2024-47808/): Missing authorization in SINEC NMS (high 8.3)
- [CVE-2024-47807](https://insights.sbomify.com/CVE-2024-47807/): Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation (high 8.1)
- [CVE-2024-47806](https://insights.sbomify.com/CVE-2024-47806/): Jenkins OpenId Connect Authentication Plugin lacks audience claim validation (high 8.1)
- [CVE-2024-47805](https://insights.sbomify.com/CVE-2024-47805/): Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission (high 7.5)
- [CVE-2024-47804](https://insights.sbomify.com/CVE-2024-47804/): Jenkins item creation restriction bypass vulnerability (medium 4.3)
- [CVE-2024-47803](https://insights.sbomify.com/CVE-2024-47803/): Jenkins exposes multi-line secrets through error messages (medium 4.3)
- [CVE-2024-47801](https://insights.sbomify.com/CVE-2024-47801/): Cross-site scripting in Sharp Digital Full-color MFPs and Monochrome MFPs (high 7.4)
- [CVE-2024-47800](https://insights.sbomify.com/CVE-2024-47800/): Privilege escalation in Intel(R) Graphics Driver software (medium 5.4)
- [CVE-2024-4780](https://insights.sbomify.com/CVE-2024-4780/): Cross-site scripting in Image Hover Effects – Elementor Addon (medium 6.4)
- [CVE-2024-47799](https://insights.sbomify.com/CVE-2024-47799/): Information disclosure in Mesh Wi-Fi router RP562B (low 3.5)
- [CVE-2024-47797](https://insights.sbomify.com/CVE-2024-47797/): Liteos_a has an out-of-bounds Write vulnerability (high 8.4)
- [CVE-2024-47796](https://insights.sbomify.com/CVE-2024-47796/): Memory corruption in DCMTK (high 8.4)
- [CVE-2024-47795](https://insights.sbomify.com/CVE-2024-47795/): Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler software (medium 5.4)
- [CVE-2024-47794](https://insights.sbomify.com/CVE-2024-47794/): bpf: Prevent tailcall infinite loop caused by freplace (high 7.8)
- [CVE-2024-47793](https://insights.sbomify.com/CVE-2024-47793/): Cross-site scripting in Exment (medium 5.4)
- [CVE-2024-47791](https://insights.sbomify.com/CVE-2024-47791/): Ruijie Reyee OS Improper Neutralization of Wildcards or Matching Symbols (high 8.7)
- [CVE-2024-47790](https://insights.sbomify.com/CVE-2024-47790/): Missing Authorization Vulnerability (high 8.7)
- [CVE-2024-4779](https://insights.sbomify.com/CVE-2024-4779/): Unlimited Elements for Elementor <= 1.5.107 - Authenticated (Contributor+) SQL Injection via data[post_ids][0] (high 8.8)
- [CVE-2024-47789](https://insights.sbomify.com/CVE-2024-47789/): Credential Leakage Vulnerability (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/248/