# Vulnerabilities published in 2024


- [CVE-2024-42385](https://insights.sbomify.com/CVE-2024-42385/): Improper Neutralization of Delimiters in Mongoose Web Server library (medium 4.0)
- [CVE-2024-42384](https://insights.sbomify.com/CVE-2024-42384/): Integer Overflow or Wraparound in Mongoose Web Server library (high 7.5)
- [CVE-2024-42383](https://insights.sbomify.com/CVE-2024-42383/): Use of Out-of-range Pointer Offset in Mongoose Web Server library (medium 4.2)
- [CVE-2024-42381](https://insights.sbomify.com/CVE-2024-42381/): os/linux/elf.rb in Homebrew brew before 4.2.20 uses ldd to load ELF files obtained from untrusted sources, which allows attackers to achieve (high 8.3)
- [CVE-2024-42380](https://insights.sbomify.com/CVE-2024-42380/): Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 4.3)
- [CVE-2024-4238](https://insights.sbomify.com/CVE-2024-4238/): Tenda AX1806 SetOnlineDevName formSetDeviceName stack-based overflow (high 8.8)
- [CVE-2024-42378](https://insights.sbomify.com/CVE-2024-42378/): Cross-Site Scripting (XSS) in eProcurement on S/4HANA (medium 6.1)
- [CVE-2024-42377](https://insights.sbomify.com/CVE-2024-42377/): Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework (medium 4.3)
- [CVE-2024-42376](https://insights.sbomify.com/CVE-2024-42376/): Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework (medium 6.5)
- [CVE-2024-42375](https://insights.sbomify.com/CVE-2024-42375/): Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform (medium 4.3)
- [CVE-2024-42374](https://insights.sbomify.com/CVE-2024-42374/): XML injection in SAP BEx Web Java Runtime Export Web Service (high 8.2)
- [CVE-2024-42373](https://insights.sbomify.com/CVE-2024-42373/): Missing Authorization Check in SAP Student Life Cycle Management (SLcM) (medium 4.3)
- [CVE-2024-42372](https://insights.sbomify.com/CVE-2024-42372/): Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory) (medium 6.5)
- [CVE-2024-42371](https://insights.sbomify.com/CVE-2024-42371/): Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 5.4)
- [CVE-2024-42370](https://insights.sbomify.com/CVE-2024-42370/): Litestar repository vulnerable to Environment Variable injection in `docs-preview.yml` workflow (high 8.3)
- [CVE-2024-4237](https://insights.sbomify.com/CVE-2024-4237/): Tenda AX1806 execCommand R7WebsSecurityHandler stack-based overflow (high 8.8)
- [CVE-2024-42369](https://insights.sbomify.com/CVE-2024-42369/): A room with itself as a its predecessor will freeze matrix-js-sdk (medium 4.1)
- [CVE-2024-42368](https://insights.sbomify.com/CVE-2024-42368/): open-telemetry has an Observable Timing Discrepancy (medium 6.5)
- [CVE-2024-42367](https://insights.sbomify.com/CVE-2024-42367/): In aiohttp, compressed files as symlinks are not protected from path traversal (medium 4.8)
- [CVE-2024-42366](https://insights.sbomify.com/CVE-2024-42366/): VR Overlay RCE (critical 9.1)
- [CVE-2024-42365](https://insights.sbomify.com/CVE-2024-42365/): Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan (high 7.4)
- [CVE-2024-42364](https://insights.sbomify.com/CVE-2024-42364/): homepage DNS rebinding vulnerability (GHSL-2024-096) (medium 6.5)
- [CVE-2024-42363](https://insights.sbomify.com/CVE-2024-42363/): GHSL-2023-136_Samson (high 8.8)
- [CVE-2024-42362](https://insights.sbomify.com/CVE-2024-42362/): GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import (high 8.8)
- [CVE-2024-42361](https://insights.sbomify.com/CVE-2024-42361/): GHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull} (high 7.5)
- [CVE-2024-42360](https://insights.sbomify.com/CVE-2024-42360/): Command Injection in sequenceserver (critical 9.8)
- [CVE-2024-4236](https://insights.sbomify.com/CVE-2024-4236/): Tenda AX1803 SetDDNSCfg formSetSysToolDDNS stack-based overflow (high 8.8)
- [CVE-2024-42358](https://insights.sbomify.com/CVE-2024-42358/): Loop with Unreachable Exit Condition ('Infinite Loop') in pdfio (medium 6.2)
- [CVE-2024-42357](https://insights.sbomify.com/CVE-2024-42357/): Shopware vulnerable to blind SQL-injection in DAL aggregations (high 7.3)
- [CVE-2024-42356](https://insights.sbomify.com/CVE-2024-42356/): Shopware vulnerable to Server Side Template Injection in Twig using Context functions (high 8.3)
- [CVE-2024-42355](https://insights.sbomify.com/CVE-2024-42355/): Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag (high 8.3)
- [CVE-2024-42354](https://insights.sbomify.com/CVE-2024-42354/): Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api (medium 5.3)
- [CVE-2024-42353](https://insights.sbomify.com/CVE-2024-42353/): WebOb's location header normalization during redirect leads to open redirect (medium 6.1)
- [CVE-2024-42352](https://insights.sbomify.com/CVE-2024-42352/): Server-Side Request Forgery (SSRF) in nuxt-icon (high 8.6)
- [CVE-2024-42351](https://insights.sbomify.com/CVE-2024-42351/): Possible Data Tampering & Loss of Public Datasets in Galaxy (medium 6.5)
- [CVE-2024-42350](https://insights.sbomify.com/CVE-2024-42350/): Public key confusion in third party block in Biscuit (low 3.0)
- [CVE-2024-4235](https://insights.sbomify.com/CVE-2024-4235/): Netgear DG834Gv5 Web Management Interface cleartext storage (low 2.7)
- [CVE-2024-42349](https://insights.sbomify.com/CVE-2024-42349/): FOG has a Log Information Disclosure (medium 5.3)
- [CVE-2024-42348](https://insights.sbomify.com/CVE-2024-42348/): FOG leaks sensitive information (AD domain, username and password) (critical 9.3)
- [CVE-2024-42347](https://insights.sbomify.com/CVE-2024-42347/): URL preview setting for a room is controllable by the homeserver in matrix-react-sdk (high 7.7)
- [CVE-2024-42346](https://insights.sbomify.com/CVE-2024-42346/): Stored Cross Site Scripting (Stored XSS) in Galaxy (high 7.6)
- [CVE-2024-42345](https://insights.sbomify.com/CVE-2024-42345/): Auth bypass in SINEMA Remote Connect Server (medium 5.3)
- [CVE-2024-42344](https://insights.sbomify.com/CVE-2024-42344/): Information disclosure in SINEMA Remote Connect Client (medium 4.8)
- [CVE-2024-42343](https://insights.sbomify.com/CVE-2024-42343/): Loway - CWE-204: Observable Response Discrepancy (medium 5.3)
- [CVE-2024-42342](https://insights.sbomify.com/CVE-2024-42342/): Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (medium 4.3)
- [CVE-2024-42341](https://insights.sbomify.com/CVE-2024-42341/): Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect') (medium 6.1)
- [CVE-2024-42340](https://insights.sbomify.com/CVE-2024-42340/): CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security (high 8.3)
- [CVE-2024-4234](https://insights.sbomify.com/CVE-2024-4234/): WordPress Filterable Portfolio plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2024-42339](https://insights.sbomify.com/CVE-2024-42339/): CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2024-42338](https://insights.sbomify.com/CVE-2024-42338/): CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2024-42337](https://insights.sbomify.com/CVE-2024-42337/): CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor (medium 4.3)
- [CVE-2024-42336](https://insights.sbomify.com/CVE-2024-42336/): Servision - CWE-287: Improper Authentication (high 8.2)
- [CVE-2024-42335](https://insights.sbomify.com/CVE-2024-42335/): 7Twenty - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (medium 5.4)
- [CVE-2024-42333](https://insights.sbomify.com/CVE-2024-42333/): Heap buffer over-read (low 2.7)
- [CVE-2024-42332](https://insights.sbomify.com/CVE-2024-42332/): New line injection in Zabbix SNMP traps (low 3.7)
- [CVE-2024-42331](https://insights.sbomify.com/CVE-2024-42331/): Use after free in browser_push_error (low 3.3)
- [CVE-2024-42330](https://insights.sbomify.com/CVE-2024-42330/): JS - Internal strings in HTTP headers (critical 9.1)
- [CVE-2024-4233](https://insights.sbomify.com/CVE-2024-4233/): Broken Access Control vulnerability in multiple WordPress plugins by Tyche Softwares (medium 4.3)
- [CVE-2024-42329](https://insights.sbomify.com/CVE-2024-42329/): JS - Crash on unexpected HTTP server response (low 3.3)
- [CVE-2024-42328](https://insights.sbomify.com/CVE-2024-42328/): JS - Crash on empty HTTP server response (low 3.3)
- [CVE-2024-42327](https://insights.sbomify.com/CVE-2024-42327/): SQL injection in user.get API (critical 9.9)
- [CVE-2024-42326](https://insights.sbomify.com/CVE-2024-42326/): Use after free vulnerability in browser.c (medium 4.4)
- [CVE-2024-42325](https://insights.sbomify.com/CVE-2024-42325/): Excessive information returned by user.get (low 2.1)
- [CVE-2024-42323](https://insights.sbomify.com/CVE-2024-42323/): Apache HertzBeat: RCE by snakeYaml deser load malicious xml (high 8.8)
- [CVE-2024-42322](https://insights.sbomify.com/CVE-2024-42322/): ipvs: properly dereference pe in ip_vs_add_service (medium 5.5)
- [CVE-2024-42321](https://insights.sbomify.com/CVE-2024-42321/): net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE (medium 5.5)
- [CVE-2024-42320](https://insights.sbomify.com/CVE-2024-42320/): s390/dasd: fix error checks in dasd_copy_pair_store() (medium 5.5)
- [CVE-2024-4232](https://insights.sbomify.com/CVE-2024-4232/): Password Storage in Plaintext Vulnerability in Digisol Router (medium 5.4)
- [CVE-2024-42319](https://insights.sbomify.com/CVE-2024-42319/): mailbox: mtk-cmdq: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (medium 5.5)
- [CVE-2024-42318](https://insights.sbomify.com/CVE-2024-42318/): landlock: Don't lose track of restrictions on cred_transfer (high 8.8)
- [CVE-2024-42317](https://insights.sbomify.com/CVE-2024-42317/): mm/huge_memory: avoid PMD-size page cache if needed (medium 5.5)
- [CVE-2024-42316](https://insights.sbomify.com/CVE-2024-42316/): mm/mglru: fix div-by-zero in vmpressure_calc_level() (medium 5.5)
- [CVE-2024-42315](https://insights.sbomify.com/CVE-2024-42315/): exfat: fix potential deadlock on __exfat_get_dentry_set (medium 5.5)
- [CVE-2024-42314](https://insights.sbomify.com/CVE-2024-42314/): btrfs: fix extent map use-after-free when adding pages to compressed bio (high 7.8)
- [CVE-2024-42313](https://insights.sbomify.com/CVE-2024-42313/): media: venus: fix use after free in vdec_close (high 7.8)
- [CVE-2024-42312](https://insights.sbomify.com/CVE-2024-42312/): sysctl: always initialize i_uid/i_gid (medium 5.5)
- [CVE-2024-42311](https://insights.sbomify.com/CVE-2024-42311/): hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (high 7.8)
- [CVE-2024-42310](https://insights.sbomify.com/CVE-2024-42310/): drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (medium 5.5)
- [CVE-2024-4231](https://insights.sbomify.com/CVE-2024-4231/): Incorrect Access Control Vulnerability in Digisol Router (medium 6.8)
- [CVE-2024-42309](https://insights.sbomify.com/CVE-2024-42309/): drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (medium 5.5)
- [CVE-2024-42307](https://insights.sbomify.com/CVE-2024-42307/): cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path (medium 5.5)
- [CVE-2024-42306](https://insights.sbomify.com/CVE-2024-42306/): udf: Avoid using corrupted block bitmap buffer (high 7.8)
- [CVE-2024-42305](https://insights.sbomify.com/CVE-2024-42305/): ext4: check dot and dotdot of dx_root before making dir indexed (medium 5.5)
- [CVE-2024-42304](https://insights.sbomify.com/CVE-2024-42304/): ext4: make sure the first directory block is not a hole (high 7.8)
- [CVE-2024-42303](https://insights.sbomify.com/CVE-2024-42303/): media: imx-pxp: Fix ERR_PTR dereference in pxp_probe() (medium 5.5)
- [CVE-2024-42302](https://insights.sbomify.com/CVE-2024-42302/): PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (high 7.8)
- [CVE-2024-42301](https://insights.sbomify.com/CVE-2024-42301/): dev/parport: fix the array out-of-bounds risk (high 7.8)
- [CVE-2024-42300](https://insights.sbomify.com/CVE-2024-42300/): erofs: fix race in z_erofs_get_gbuf() (high 7.8)
- [CVE-2024-4230](https://insights.sbomify.com/CVE-2024-4230/): Path traversal in Edgecross Basic Software for Developers (high 7.8)
- [CVE-2024-42299](https://insights.sbomify.com/CVE-2024-42299/): fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (high 7.8)
- [CVE-2024-42298](https://insights.sbomify.com/CVE-2024-42298/): ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value (medium 5.5)
- [CVE-2024-42297](https://insights.sbomify.com/CVE-2024-42297/): f2fs: fix to don't dirty inode for readonly filesystem (high 7.8)
- [CVE-2024-42296](https://insights.sbomify.com/CVE-2024-42296/): f2fs: fix return value of f2fs_convert_inline_inode() (high 7.8)
- [CVE-2024-42295](https://insights.sbomify.com/CVE-2024-42295/): nilfs2: handle inconsistent state in nilfs_btnode_create_block() (medium 5.5)
- [CVE-2024-42294](https://insights.sbomify.com/CVE-2024-42294/): block: fix deadlock between sd_remove & sd_release (medium 5.5)
- [CVE-2024-42293](https://insights.sbomify.com/CVE-2024-42293/): arm64: mm: Fix lockless walks with static and dynamic page-table folding (high 7.8)
- [CVE-2024-42292](https://insights.sbomify.com/CVE-2024-42292/): kobject_uevent: Fix OOB access within zap_modalias_env() (high 7.1)
- [CVE-2024-42291](https://insights.sbomify.com/CVE-2024-42291/): ice: Add a per-VF limit on number of FDIR filters (medium 5.5)
- [CVE-2024-42290](https://insights.sbomify.com/CVE-2024-42290/): irqchip/imx-irqsteer: Handle runtime power management correctly (medium 5.5)
- [CVE-2024-4229](https://insights.sbomify.com/CVE-2024-4229/): Misconfiguration in Edgecross Basic Software for Developers (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/291/