# Vulnerabilities published in 2024


- [CVE-2024-45320](https://insights.sbomify.com/CVE-2024-45320/): Memory corruption in DocuPrint CM225fw (medium 6.5)
- [CVE-2024-4532](https://insights.sbomify.com/CVE-2024-4532/): Business Card <= 1.0.0 - Arbitrary Card Deletion via CSRF (medium 6.4)
- [CVE-2024-45319](https://insights.sbomify.com/CVE-2024-45319/): Auth bypass in SMA100 (medium 6.3)
- [CVE-2024-45318](https://insights.sbomify.com/CVE-2024-45318/): Memory corruption in SMA100 (high 8.1)
- [CVE-2024-45317](https://insights.sbomify.com/CVE-2024-45317/): Server-side request forgery in SMA1000 (high 7.5)
- [CVE-2024-45316](https://insights.sbomify.com/CVE-2024-45316/): Privilege escalation in Connect Tunnel (high 7.8)
- [CVE-2024-45315](https://insights.sbomify.com/CVE-2024-45315/): Path traversal in Connect Tunnel (medium 5.5)
- [CVE-2024-45314](https://insights.sbomify.com/CVE-2024-45314/): Flask-AppBuilder login form allows browser to cache sensitive fields (low 3.6)
- [CVE-2024-45313](https://insights.sbomify.com/CVE-2024-45313/): Insecure default setting for Server Pro installed via Overleaf toolkit (medium 5.4)
- [CVE-2024-45312](https://insights.sbomify.com/CVE-2024-45312/): Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf (medium 5.3)
- [CVE-2024-45311](https://insights.sbomify.com/CVE-2024-45311/): Denial of service in quinn-proto when using `Endpoint::retry()` (high 7.5)
- [CVE-2024-45310](https://insights.sbomify.com/CVE-2024-45310/): runc can be confused to create empty files/directories on the host (low 3.6)
- [CVE-2024-4531](https://insights.sbomify.com/CVE-2024-4531/): Business Card <= 1.0.0 - Card Edit via CSRF (high 7.1)
- [CVE-2024-45309](https://insights.sbomify.com/CVE-2024-45309/): OneDev vulnerable to arbitrary file reading for unauthenticated user (high 8.7)
- [CVE-2024-45308](https://insights.sbomify.com/CVE-2024-45308/): MySQL & free URL mode allows to hide existing notes in hedgedoc (medium 6.5)
- [CVE-2024-45307](https://insights.sbomify.com/CVE-2024-45307/): SudoBot missing authorization check in `-config` command (high 8.8)
- [CVE-2024-45306](https://insights.sbomify.com/CVE-2024-45306/): heap-buffer-overflow in Vim (medium 4.5)
- [CVE-2024-45305](https://insights.sbomify.com/CVE-2024-45305/): gix-path uses local config across repos when it is the highest scope (low 2.5)
- [CVE-2024-45304](https://insights.sbomify.com/CVE-2024-45304/): Business logic in cairo-contracts (medium 5.3)
- [CVE-2024-45303](https://insights.sbomify.com/CVE-2024-45303/): Discourse Calendar plugin event names susceptible to XSS (medium 6.1)
- [CVE-2024-45302](https://insights.sbomify.com/CVE-2024-45302/): CRLF Injection in RestSharp's `RestRequest.AddHeader` method (medium 6.1)
- [CVE-2024-45301](https://insights.sbomify.com/CVE-2024-45301/): ZDI-CAN-24744: Mintty Path Conversion Improper Input Validation Information Disclosure Vulnerability (medium 5.3)
- [CVE-2024-45300](https://insights.sbomify.com/CVE-2024-45300/): Bypassing promo code limitations with race conditions (high 7.5)
- [CVE-2024-4530](https://insights.sbomify.com/CVE-2024-4530/): Business Card <= 1.0.0 - Category Edit via CSRF (medium 6.3)
- [CVE-2024-45299](https://insights.sbomify.com/CVE-2024-45299/): alf.io's preloaded data as json is not escaped correctly (medium 6.5)
- [CVE-2024-45298](https://insights.sbomify.com/CVE-2024-45298/): Disabled user can bypass lockout by requesting password reset in wiki.js (medium 4.3)
- [CVE-2024-45297](https://insights.sbomify.com/CVE-2024-45297/): Prevent topic list filtering by hidden tags for unauthorized users in Discourse (medium 5.3)
- [CVE-2024-45296](https://insights.sbomify.com/CVE-2024-45296/): path-to-regexp outputs backtracking regular expressions (high 7.5)
- [CVE-2024-45294](https://insights.sbomify.com/CVE-2024-45294/): `org.hl7.fhir.core` XXE vulnerability in XSLT transforms (high 8.6)
- [CVE-2024-45293](https://insights.sbomify.com/CVE-2024-45293/): XML External Entity Reference (XXE) in PHPSpreadsheet's XLSX reader (high 7.5)
- [CVE-2024-45292](https://insights.sbomify.com/CVE-2024-45292/): PhpSpreadsheet HTML writer is vulnerable to Cross-Site Scripting via JavaScript hyperlinks (medium 5.4)
- [CVE-2024-45291](https://insights.sbomify.com/CVE-2024-45291/): Path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet (medium 6.3)
- [CVE-2024-45290](https://insights.sbomify.com/CVE-2024-45290/): Path traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet (high 7.7)
- [CVE-2024-4529](https://insights.sbomify.com/CVE-2024-4529/): Business Card <= 1.0.0 - Category Deletion via CSRF (medium 5.0)
- [CVE-2024-45289](https://insights.sbomify.com/CVE-2024-45289/): Unbounded allocation in ctl(4) CAM Target Layer (high 7.5)
- [CVE-2024-45288](https://insights.sbomify.com/CVE-2024-45288/): Multiple vulnerabilities in libnv (high 8.4)
- [CVE-2024-45287](https://insights.sbomify.com/CVE-2024-45287/): Multiple vulnerabilities in libnv (critical 9.1)
- [CVE-2024-45286](https://insights.sbomify.com/CVE-2024-45286/): Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface) (medium 6.5)
- [CVE-2024-45285](https://insights.sbomify.com/CVE-2024-45285/): Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 5.4)
- [CVE-2024-45284](https://insights.sbomify.com/CVE-2024-45284/): Missing authorization check in SAP Student Life Cycle Management (SLcM) (low 2.4)
- [CVE-2024-45283](https://insights.sbomify.com/CVE-2024-45283/): Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service) (medium 6.0)
- [CVE-2024-45282](https://insights.sbomify.com/CVE-2024-45282/): HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements) (medium 4.3)
- [CVE-2024-45281](https://insights.sbomify.com/CVE-2024-45281/): DLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform (medium 5.8)
- [CVE-2024-45280](https://insights.sbomify.com/CVE-2024-45280/): Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Java (Logon Application) (medium 4.8)
- [CVE-2024-4528](https://insights.sbomify.com/CVE-2024-4528/): SourceCodester Prison Management System user-record.php cross site scripting (low 2.4)
- [CVE-2024-45279](https://insights.sbomify.com/CVE-2024-45279/): Cross-site scripting in SAP NetWeaver Application Server for ABAP (CRM Blueprint Application Builder Panel) (medium 6.1)
- [CVE-2024-45278](https://insights.sbomify.com/CVE-2024-45278/): Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backoffice (medium 5.4)
- [CVE-2024-45277](https://insights.sbomify.com/CVE-2024-45277/): Prototype Pollution vulnerability in SAP HANA Client (medium 4.3)
- [CVE-2024-45276](https://insights.sbomify.com/CVE-2024-45276/): MB connect line/Helmholz: tmp directory exposed via webservice (high 7.5)
- [CVE-2024-45275](https://insights.sbomify.com/CVE-2024-45275/): MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords (critical 9.8)
- [CVE-2024-45274](https://insights.sbomify.com/CVE-2024-45274/): MB connect line/Helmholz: Remote code execution via confnet service (critical 9.8)
- [CVE-2024-45273](https://insights.sbomify.com/CVE-2024-45273/): MB connect line/Helmholz: Weak encryption of configuration file (high 8.4)
- [CVE-2024-45272](https://insights.sbomify.com/CVE-2024-45272/): MB connect line/Helmholz: Generation of weak passwords vulnerability (high 7.5)
- [CVE-2024-45271](https://insights.sbomify.com/CVE-2024-45271/): MB connect line/Helmholz: Remote code execution due to improper input validation (high 8.4)
- [CVE-2024-45270](https://insights.sbomify.com/CVE-2024-45270/): Cross-site request forgery in Carousel Slider (medium 4.3)
- [CVE-2024-4527](https://insights.sbomify.com/CVE-2024-4527/): Campcodes Complete Web-Based School Management System student_payment_details2.php cross site scripting (low 3.5)
- [CVE-2024-45269](https://insights.sbomify.com/CVE-2024-45269/): Cross-site request forgery in Carousel Slider (medium 4.3)
- [CVE-2024-45265](https://insights.sbomify.com/CVE-2024-45265/): SQL injection in skyss:arfa-cms (critical 9.8)
- [CVE-2024-45264](https://insights.sbomify.com/CVE-2024-45264/): Cross-site request forgery in skyss:arfa-cms (high 8.0)
- [CVE-2024-45263](https://insights.sbomify.com/CVE-2024-45263/): File upload in gl-inet:a1300 firmware (high 8.8)
- [CVE-2024-45262](https://insights.sbomify.com/CVE-2024-45262/): Path traversal in gl-inet:a1300 firmware (high 8.8)
- [CVE-2024-45261](https://insights.sbomify.com/CVE-2024-45261/): Auth bypass in gl-inet:a1300 firmware (high 8.0)
- [CVE-2024-45260](https://insights.sbomify.com/CVE-2024-45260/): Missing authorization in gl-inet:a1300 firmware (high 8.0)
- [CVE-2024-4526](https://insights.sbomify.com/CVE-2024-4526/): Campcodes Complete Web-Based School Management System student_payment_details3.php cross site scripting (low 3.5)
- [CVE-2024-45259](https://insights.sbomify.com/CVE-2024-45259/): Path traversal in gl-inet:a1300 firmware (medium 6.5)
- [CVE-2024-45258](https://insights.sbomify.com/CVE-2024-45258/): req may send an unintended request when a malformed URL is provided (critical 9.8)
- [CVE-2024-45257](https://insights.sbomify.com/CVE-2024-45257/): A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbitrary commands on th (high 7.3)
- [CVE-2024-45256](https://insights.sbomify.com/CVE-2024-45256/): An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite database (critical 9.8)
- [CVE-2024-45254](https://insights.sbomify.com/CVE-2024-45254/): VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (high 7.5)
- [CVE-2024-45253](https://insights.sbomify.com/CVE-2024-45253/): Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (high 7.5)
- [CVE-2024-45252](https://insights.sbomify.com/CVE-2024-45252/): Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (critical 9.8)
- [CVE-2024-45251](https://insights.sbomify.com/CVE-2024-45251/): Elsight – CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (critical 9.8)
- [CVE-2024-45250](https://insights.sbomify.com/CVE-2024-45250/): ZKteco – CWE 200 Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2024-4525](https://insights.sbomify.com/CVE-2024-4525/): Campcodes Complete Web-Based School Management System student_payment_details4.php cross site scripting (low 3.5)
- [CVE-2024-45249](https://insights.sbomify.com/CVE-2024-45249/): Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (critical 9.8)
- [CVE-2024-45248](https://insights.sbomify.com/CVE-2024-45248/): Multi-DNC – CWE-35: Path Traversal: '.../...//' (high 7.5)
- [CVE-2024-45247](https://insights.sbomify.com/CVE-2024-45247/): Sonarr – CWE-601: URL Redirection to Untrusted Site ('Open Redirect') (medium 6.1)
- [CVE-2024-45246](https://insights.sbomify.com/CVE-2024-45246/): Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element (high 7.3)
- [CVE-2024-45245](https://insights.sbomify.com/CVE-2024-45245/): Diebold Nixdorf – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (high 7.8)
- [CVE-2024-45244](https://insights.sbomify.com/CVE-2024-45244/): Hyperledger Fabric does not verify request has a timestamp within the expected time window (medium 5.3)
- [CVE-2024-45242](https://insights.sbomify.com/CVE-2024-45242/): EnGenius ENH1350EXT A8J-ENH1350EXT devices through 3.9.3.2_c1.9.51 allow (blind) OS Command Injection via shell metacharacters to the Ping or Speed Test utility. (high 7.8)
- [CVE-2024-45241](https://insights.sbomify.com/CVE-2024-45241/): A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated at (high 7.5)
- [CVE-2024-45240](https://insights.sbomify.com/CVE-2024-45240/): The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via de (high 7.4)
- [CVE-2024-4524](https://insights.sbomify.com/CVE-2024-4524/): Campcodes Complete Web-Based School Management System student_payment_invoice.php cross site scripting (low 3.5)
- [CVE-2024-45239](https://insights.sbomify.com/CVE-2024-45239/): Null dereference in nicmx:fort-validator (high 7.5)
- [CVE-2024-45238](https://insights.sbomify.com/CVE-2024-45238/): Null dereference in nicmx:fort validator (high 7.5)
- [CVE-2024-45237](https://insights.sbomify.com/CVE-2024-45237/): Memory corruption in nicmx:fort-validator (critical 9.8)
- [CVE-2024-45236](https://insights.sbomify.com/CVE-2024-45236/): Denial of service in nicmx:fort-validator (high 7.5)
- [CVE-2024-45235](https://insights.sbomify.com/CVE-2024-45235/): Null dereference in nicmx:fort validator (high 7.5)
- [CVE-2024-45234](https://insights.sbomify.com/CVE-2024-45234/): Denial of service in nicmx:fort-validator (high 7.5)
- [CVE-2024-45233](https://insights.sbomify.com/CVE-2024-45233/): Powermail TYPO3 extension Broken Access Control in the OutputController (high 7.3)
- [CVE-2024-45232](https://insights.sbomify.com/CVE-2024-45232/): "powermail" (powermail) Insecure Direct Object Reference (IDOR) (high 7.3)
- [CVE-2024-45231](https://insights.sbomify.com/CVE-2024-45231/): Django allows enumeration of user e-mail addresses (medium 5.3)
- [CVE-2024-45230](https://insights.sbomify.com/CVE-2024-45230/): Django vulnerable to denial-of-service attack via the urlize() and urlizetrunc() template filters (high 7.5)
- [CVE-2024-4523](https://insights.sbomify.com/CVE-2024-4523/): Campcodes Complete Web-Based School Management System teacher_attendance_history1.php cross site scripting (low 3.5)
- [CVE-2024-45229](https://insights.sbomify.com/CVE-2024-45229/): Missing authorization in Director (medium 6.6)
- [CVE-2024-4522](https://insights.sbomify.com/CVE-2024-4522/): Campcodes Complete Web-Based School Management System teacher_salary_details.php cross site scripting (low 3.5)
- [CVE-2024-45219](https://insights.sbomify.com/CVE-2024-45219/): Apache CloudStack: Uploaded and registered templates and volumes can be used to abuse KVM-based infrastructure (high 8.5)
- [CVE-2024-45217](https://insights.sbomify.com/CVE-2024-45217/): Apache Solr: ConfigSets created during a backup restore command are trusted implicitly (high 8.1)
- [CVE-2024-45216](https://insights.sbomify.com/CVE-2024-45216/): Apache Solr: Authentication bypass possible using a fake URL Path ending (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/268/