# Vulnerabilities published in 2024


- [CVE-2024-47598](https://insights.sbomify.com/CVE-2024-47598/): GHSL-2024-246: GStreamer has an OOB-read in qtdemux_merge_sample_table (medium 5.1)
- [CVE-2024-47597](https://insights.sbomify.com/CVE-2024-47597/): GHSL-2024-245: GStreamer has an OOB-read in qtdemux_parse_samples (medium 5.1)
- [CVE-2024-47596](https://insights.sbomify.com/CVE-2024-47596/): GHSL-2024-244: GStreamer has an OOB-read in FOURCC_SMI_ parsing (medium 5.1)
- [CVE-2024-47595](https://insights.sbomify.com/CVE-2024-47595/): Local Privilege Escalation in SAP Host Agent (medium 6.3)
- [CVE-2024-47594](https://insights.sbomify.com/CVE-2024-47594/): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (KMC) (medium 5.4)
- [CVE-2024-47593](https://insights.sbomify.com/CVE-2024-47593/): Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 4.3)
- [CVE-2024-47592](https://insights.sbomify.com/CVE-2024-47592/): Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application) (medium 5.3)
- [CVE-2024-47590](https://insights.sbomify.com/CVE-2024-47590/): Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher (high 8.8)
- [CVE-2024-4759](https://insights.sbomify.com/CVE-2024-4759/): Mime Types Extended <= 0.11 - Author+ Stored XSS via SVG Upload (medium 5.5)
- [CVE-2024-47588](https://insights.sbomify.com/CVE-2024-47588/): Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager) (medium 4.7)
- [CVE-2024-47587](https://insights.sbomify.com/CVE-2024-47587/): Missing authorization check in SAP Cash Management (Cash Operations) (low 3.5)
- [CVE-2024-47586](https://insights.sbomify.com/CVE-2024-47586/): NULL Pointer Dereference vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 5.3)
- [CVE-2024-47585](https://insights.sbomify.com/CVE-2024-47585/): Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 4.3)
- [CVE-2024-47582](https://insights.sbomify.com/CVE-2024-47582/): XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA (medium 5.3)
- [CVE-2024-47581](https://insights.sbomify.com/CVE-2024-47581/): Missing Authorization check in SAP HCM (Approve Timesheets version 4) (medium 4.3)
- [CVE-2024-47580](https://insights.sbomify.com/CVE-2024-47580/): Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services) (medium 6.8)
- [CVE-2024-4758](https://insights.sbomify.com/CVE-2024-4758/): Muslim Prayer Time BD <= 2.4 - Settings Reset via CSRF (high 7.6)
- [CVE-2024-47579](https://insights.sbomify.com/CVE-2024-47579/): Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services) (medium 6.8)
- [CVE-2024-47578](https://insights.sbomify.com/CVE-2024-47578/): Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services) (critical 9.1)
- [CVE-2024-47577](https://insights.sbomify.com/CVE-2024-47577/): Information Disclosure vulnerability in SAP Commerce Cloud (low 2.7)
- [CVE-2024-47576](https://insights.sbomify.com/CVE-2024-47576/): DLL Hijacking vulnerability in SAP Product Lifecycle Costing (low 3.3)
- [CVE-2024-47575](https://insights.sbomify.com/CVE-2024-47575/): Fortinet FortiManager Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2024-47574](https://insights.sbomify.com/CVE-2024-47574/): Auth bypass in FortiClientWindows (high 7.4)
- [CVE-2024-47573](https://insights.sbomify.com/CVE-2024-47573/): Security feature bypass in FortiNDR (medium 6.0)
- [CVE-2024-47572](https://insights.sbomify.com/CVE-2024-47572/): Code injection in FortiSOAR (high 8.3)
- [CVE-2024-47571](https://insights.sbomify.com/CVE-2024-47571/): Use after free in FortiManager (high 7.9)
- [CVE-2024-47570](https://insights.sbomify.com/CVE-2024-47570/): Information disclosure in FortiOS (medium 6.3)
- [CVE-2024-4757](https://insights.sbomify.com/CVE-2024-4757/): Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF (high 8.1)
- [CVE-2024-47569](https://insights.sbomify.com/CVE-2024-47569/): Information disclosure in FortiMail (medium 4.2)
- [CVE-2024-47566](https://insights.sbomify.com/CVE-2024-47566/): Path traversal in FortiRecorder (medium 4.8)
- [CVE-2024-47565](https://insights.sbomify.com/CVE-2024-47565/): Other in SINEC Security Monitor (medium 5.3)
- [CVE-2024-47563](https://insights.sbomify.com/CVE-2024-47563/): Path traversal in SINEC Security Monitor (medium 6.9)
- [CVE-2024-47562](https://insights.sbomify.com/CVE-2024-47562/): Command injection in SINEC Security Monitor (critical 9.3)
- [CVE-2024-47561](https://insights.sbomify.com/CVE-2024-47561/): Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) (critical 9.2)
- [CVE-2024-47560](https://insights.sbomify.com/CVE-2024-47560/): Missing authorization in RevoWorks Cloud Client (high 7.8)
- [CVE-2024-4756](https://insights.sbomify.com/CVE-2024-4756/): WP Backpack <= 2.1 - Admin+ Stored XSS (medium 5.4)
- [CVE-2024-47559](https://insights.sbomify.com/CVE-2024-47559/): Authenticated RCE via Path Traversal (high 7.6)
- [CVE-2024-47558](https://insights.sbomify.com/CVE-2024-47558/): Authenticated RCE via Path Traversal (high 7.6)
- [CVE-2024-47557](https://insights.sbomify.com/CVE-2024-47557/): Pre-Auth RCE via Path Traversal (high 8.3)
- [CVE-2024-47556](https://insights.sbomify.com/CVE-2024-47556/): Pre-Auth RCE via Path Traversal (high 8.3)
- [CVE-2024-47555](https://insights.sbomify.com/CVE-2024-47555/): Missing Authentication - User & System Configuration (high 8.3)
- [CVE-2024-47554](https://insights.sbomify.com/CVE-2024-47554/): Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader (medium 4.3)
- [CVE-2024-47553](https://insights.sbomify.com/CVE-2024-47553/): Command injection in SINEC Security Monitor (critical 9.4)
- [CVE-2024-47552](https://insights.sbomify.com/CVE-2024-47552/): Apache Seata (incubating): Deserialization of untrusted Data in jraft mode in Apache Seata Server (critical 9.8)
- [CVE-2024-47550](https://insights.sbomify.com/CVE-2024-47550/): Misconfiguration in Endurance Gaming Mode software installers (medium 5.4)
- [CVE-2024-4755](https://insights.sbomify.com/CVE-2024-4755/): Google CSE <= 1.0.7 - Admin+ Stored XSS (medium 4.0)
- [CVE-2024-47549](https://insights.sbomify.com/CVE-2024-47549/): Cross-site scripting in Sharp Digital Full-color MFPs and Monochrome MFPs (high 7.4)
- [CVE-2024-47547](https://insights.sbomify.com/CVE-2024-47547/): Ruijie Reyee OS Weak Password Recovery Mechanism for Forgotten Password (critical 9.3)
- [CVE-2024-47546](https://insights.sbomify.com/CVE-2024-47546/): GHSL-2024-243: GStreamer has an integer underflow in extract_cc_from_data leading to OOB-read (medium 6.9)
- [CVE-2024-47545](https://insights.sbomify.com/CVE-2024-47545/): GHSL-2024-242: GStreamer has an integer underflow in FOURCC_strf parsing leading to OOB-read (medium 6.9)
- [CVE-2024-47544](https://insights.sbomify.com/CVE-2024-47544/): GHSL-2024-238: GStreamer has NULL-pointer dereferences in MP4/MOV demuxer CENC handling (medium 6.8)
- [CVE-2024-47543](https://insights.sbomify.com/CVE-2024-47543/): GHSL-2024-236: GStreamer has an OOB-read in qtdemux_parse_container (medium 5.1)
- [CVE-2024-47542](https://insights.sbomify.com/CVE-2024-47542/): GHSL-2024-235: GStreamer ID3v2 parser out-of-bounds read and NULL-pointer dereference (medium 6.8)
- [CVE-2024-47541](https://insights.sbomify.com/CVE-2024-47541/): GHSL-2024-228: GStreamer has an out-of-bounds write in SSA subtitle parser (medium 6.9)
- [CVE-2024-47540](https://insights.sbomify.com/CVE-2024-47540/): GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer (high 8.6)
- [CVE-2024-4754](https://insights.sbomify.com/CVE-2024-4754/): Stored XSS in Next4Biz's BPM (medium 5.4)
- [CVE-2024-47539](https://insights.sbomify.com/CVE-2024-47539/): GHSL-2024-195: GStreamer has an OOB-write in convert_to_s334_1a (high 8.6)
- [CVE-2024-47538](https://insights.sbomify.com/CVE-2024-47538/): GHSL-2024-115: GStreamer has a stack-buffer overflow in vorbis_handle_identification_packet (high 8.6)
- [CVE-2024-47537](https://insights.sbomify.com/CVE-2024-47537/): GHSL-2024-094: GStreamer has an OOB-write in isomp4/qtdemux.c (high 8.6)
- [CVE-2024-47536](https://insights.sbomify.com/CVE-2024-47536/): starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field (medium 4.8)
- [CVE-2024-47535](https://insights.sbomify.com/CVE-2024-47535/): Denial of Service attack on windows app using Netty (medium 5.5)
- [CVE-2024-47534](https://insights.sbomify.com/CVE-2024-47534/): Incorrect delegation lookups can make go-tuf download the wrong artifact (high 8.2)
- [CVE-2024-47533](https://insights.sbomify.com/CVE-2024-47533/): Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes (critical 9.8)
- [CVE-2024-47532](https://insights.sbomify.com/CVE-2024-47532/): RestrictedPython information leakage via `AttributeError.obj` and the `string` module (high 8.7)
- [CVE-2024-47531](https://insights.sbomify.com/CVE-2024-47531/): Scout contains insufficient output escaping of attachment names (medium 4.6)
- [CVE-2024-47530](https://insights.sbomify.com/CVE-2024-47530/): Scout contains an Open Redirect on Login via `next` (medium 5.4)
- [CVE-2024-4753](https://insights.sbomify.com/CVE-2024-4753/): WP Secure Maintenance < 1.7 - Admin+ Stored XSS (medium 5.9)
- [CVE-2024-47529](https://insights.sbomify.com/CVE-2024-47529/): OpenC3 COSMOS uses clear text storage of password/token (`GHSL-2024-129`) (medium 4.8)
- [CVE-2024-47528](https://insights.sbomify.com/CVE-2024-47528/): LibreNMS Contains a Stored XSS via File Upload (medium 4.6)
- [CVE-2024-47527](https://insights.sbomify.com/CVE-2024-47527/): LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device-dependencies.inc.php (high 7.5)
- [CVE-2024-47526](https://insights.sbomify.com/CVE-2024-47526/): LibreNMS has a Self-XSS ('Cross-site Scripting') in librenms/includes/html/modal/alert_template.inc.php (low 3.5)
- [CVE-2024-47525](https://insights.sbomify.com/CVE-2024-47525/): Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-alert-rules.php (high 7.5)
- [CVE-2024-47524](https://insights.sbomify.com/CVE-2024-47524/): LibreNMS has Stored Cross-site Scripting vulnerability in "Device Group" Name (high 7.2)
- [CVE-2024-47523](https://insights.sbomify.com/CVE-2024-47523/): LibreNMS has Stored Cross-site Scripting vulnerability in "Alert Transports" feature (high 7.5)
- [CVE-2024-47522](https://insights.sbomify.com/CVE-2024-47522/): Suricata ja4: invalid alpn leads to panic (high 7.5)
- [CVE-2024-47520](https://insights.sbomify.com/CVE-2024-47520/): A user with advanced report application access rights can perform actions for which they are not authorized (high 7.6)
- [CVE-2024-4752](https://insights.sbomify.com/CVE-2024-4752/): EventON < 2.2.15 - Admin+ Stored Cross-Site Scripting via event subtitle (medium 5.9)
- [CVE-2024-47519](https://insights.sbomify.com/CVE-2024-47519/): Backup uploads to ETM subject to man-in-the-middle interception (high 8.3)
- [CVE-2024-47518](https://insights.sbomify.com/CVE-2024-47518/): Specially constructed queries targeting ETM could discover active remote access sessions (medium 6.4)
- [CVE-2024-47517](https://insights.sbomify.com/CVE-2024-47517/): Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access (medium 6.8)
- [CVE-2024-47516](https://insights.sbomify.com/CVE-2024-47516/): Pagure: argument injection in pagurerepo.log() (critical 9.8)
- [CVE-2024-47515](https://insights.sbomify.com/CVE-2024-47515/): Pagure: generate_archive() follows symbolic links in temporary clones (high 8.1)
- [CVE-2024-4751](https://insights.sbomify.com/CVE-2024-4751/): WP Prayer II <= 2.4.7 - Settings Update via CSRF (medium 4.3)
- [CVE-2024-47509](https://insights.sbomify.com/CVE-2024-47509/): Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3 (high 7.1)
- [CVE-2024-47508](https://insights.sbomify.com/CVE-2024-47508/): Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2 (high 7.1)
- [CVE-2024-47507](https://insights.sbomify.com/CVE-2024-47507/): Other in Junos OS (medium 6.9)
- [CVE-2024-47506](https://insights.sbomify.com/CVE-2024-47506/): Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash (high 8.2)
- [CVE-2024-47505](https://insights.sbomify.com/CVE-2024-47505/): Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1 (high 7.1)
- [CVE-2024-47504](https://insights.sbomify.com/CVE-2024-47504/): Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash (high 8.7)
- [CVE-2024-47503](https://insights.sbomify.com/CVE-2024-47503/): Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash (high 7.1)
- [CVE-2024-47502](https://insights.sbomify.com/CVE-2024-47502/): Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS (high 8.7)
- [CVE-2024-47501](https://insights.sbomify.com/CVE-2024-47501/): Null dereference in Junos OS (medium 6.8)
- [CVE-2024-4750](https://insights.sbomify.com/CVE-2024-4750/): BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment (medium 5.3)
- [CVE-2024-47499](https://insights.sbomify.com/CVE-2024-47499/): Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash (high 8.7)
- [CVE-2024-47498](https://insights.sbomify.com/CVE-2024-47498/): Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect (high 7.1)
- [CVE-2024-47497](https://insights.sbomify.com/CVE-2024-47497/): Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion (high 8.7)
- [CVE-2024-47496](https://insights.sbomify.com/CVE-2024-47496/): Junos OS: MX Series: The PFE will crash on running specific command (medium 6.8)
- [CVE-2024-47495](https://insights.sbomify.com/CVE-2024-47495/): Auth bypass in Junos OS Evolved (high 8.4)
- [CVE-2024-47494](https://insights.sbomify.com/CVE-2024-47494/): Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset (high 8.2)
- [CVE-2024-47493](https://insights.sbomify.com/CVE-2024-47493/): Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/251/