# Vulnerabilities published in 2024


- [CVE-2024-40830](https://insights.sbomify.com/CVE-2024-40830/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2024-4083](https://insights.sbomify.com/CVE-2024-4083/): Easy Restaurant Table Booking <= 1.0.0 - Cross-Site Request Forgery (medium 4.3)
- [CVE-2024-40829](https://insights.sbomify.com/CVE-2024-40829/): Use after free in iOS and iPadOS (high 7.5)
- [CVE-2024-40828](https://insights.sbomify.com/CVE-2024-40828/): Privilege escalation in macOS (high 8.4)
- [CVE-2024-40827](https://insights.sbomify.com/CVE-2024-40827/): Other in macOS (medium 5.5)
- [CVE-2024-40826](https://insights.sbomify.com/CVE-2024-40826/): Information disclosure in iOS and iPadOS (medium 6.1)
- [CVE-2024-40825](https://insights.sbomify.com/CVE-2024-40825/): Missing authorization in macOS (medium 6.0)
- [CVE-2024-40824](https://insights.sbomify.com/CVE-2024-40824/): Security feature bypass in iOS and iPadOS (high 7.7)
- [CVE-2024-40823](https://insights.sbomify.com/CVE-2024-40823/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-40822](https://insights.sbomify.com/CVE-2024-40822/): Security feature bypass in iOS and iPadOS (low 2.4)
- [CVE-2024-40821](https://insights.sbomify.com/CVE-2024-40821/): Security feature bypass in macOS (high 8.4)
- [CVE-2024-4082](https://insights.sbomify.com/CVE-2024-4082/): Joli FAQ SEO – WordPress FAQ Plugin <= 1.3.2 - Cross-Site Request Forgery (medium 4.3)
- [CVE-2024-40818](https://insights.sbomify.com/CVE-2024-40818/): Security feature bypass in iOS and iPadOS (medium 4.6)
- [CVE-2024-40817](https://insights.sbomify.com/CVE-2024-40817/): Other in Safari (medium 6.1)
- [CVE-2024-40816](https://insights.sbomify.com/CVE-2024-40816/): Memory corruption in macOS (medium 5.5)
- [CVE-2024-40815](https://insights.sbomify.com/CVE-2024-40815/): Race condition in iOS and iPadOS (high 7.5)
- [CVE-2024-40814](https://insights.sbomify.com/CVE-2024-40814/): Security feature bypass in macOS (high 7.1)
- [CVE-2024-40813](https://insights.sbomify.com/CVE-2024-40813/): Security feature bypass in iOS and iPadOS (medium 4.6)
- [CVE-2024-40812](https://insights.sbomify.com/CVE-2024-40812/): Security feature bypass in iOS and iPadOS (high 7.8)
- [CVE-2024-40811](https://insights.sbomify.com/CVE-2024-40811/): Security feature bypass in macOS (high 8.4)
- [CVE-2024-40810](https://insights.sbomify.com/CVE-2024-40810/): Memory corruption in macOS (medium 5.5)
- [CVE-2024-4081](https://insights.sbomify.com/CVE-2024-4081/): Memory Corruption Due to Improper Length Check in NI LabVIEW (high 8.4)
- [CVE-2024-40809](https://insights.sbomify.com/CVE-2024-40809/): Security feature bypass in iOS and iPadOS (high 7.8)
- [CVE-2024-40807](https://insights.sbomify.com/CVE-2024-40807/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-40806](https://insights.sbomify.com/CVE-2024-40806/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2024-40805](https://insights.sbomify.com/CVE-2024-40805/): Security feature bypass in iOS and iPadOS (high 7.7)
- [CVE-2024-40804](https://insights.sbomify.com/CVE-2024-40804/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-40803](https://insights.sbomify.com/CVE-2024-40803/): Memory corruption in macOS (high 7.5)
- [CVE-2024-40802](https://insights.sbomify.com/CVE-2024-40802/): Privilege escalation in macOS (high 7.8)
- [CVE-2024-40801](https://insights.sbomify.com/CVE-2024-40801/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-40800](https://insights.sbomify.com/CVE-2024-40800/): Security feature bypass in macOS (high 8.4)
- [CVE-2024-4080](https://insights.sbomify.com/CVE-2024-4080/): Memory Corruption Due to Improper Length Checks in LabVIEW tdcore.dll (high 8.4)
- [CVE-2024-40799](https://insights.sbomify.com/CVE-2024-40799/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2024-40798](https://insights.sbomify.com/CVE-2024-40798/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2024-40797](https://insights.sbomify.com/CVE-2024-40797/): Other in macOS (medium 6.1)
- [CVE-2024-40796](https://insights.sbomify.com/CVE-2024-40796/): Information disclosure in iOS and iPadOS (medium 5.3)
- [CVE-2024-40795](https://insights.sbomify.com/CVE-2024-40795/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2024-40794](https://insights.sbomify.com/CVE-2024-40794/): Auth bypass in Safari (medium 5.3)
- [CVE-2024-40793](https://insights.sbomify.com/CVE-2024-40793/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-40792](https://insights.sbomify.com/CVE-2024-40792/): Privilege escalation in macOS (low 3.3)
- [CVE-2024-40791](https://insights.sbomify.com/CVE-2024-40791/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2024-40790](https://insights.sbomify.com/CVE-2024-40790/): Information disclosure in visionOS (medium 5.5)
- [CVE-2024-4079](https://insights.sbomify.com/CVE-2024-4079/): Out of Bounds Read Due to Missing Bounds Check in LabVIEW (high 7.8)
- [CVE-2024-40789](https://insights.sbomify.com/CVE-2024-40789/): Memory corruption in Safari (medium 6.5)
- [CVE-2024-40788](https://insights.sbomify.com/CVE-2024-40788/): Memory corruption in iOS and iPadOS (medium 6.2)
- [CVE-2024-40787](https://insights.sbomify.com/CVE-2024-40787/): Security feature bypass in iOS and iPadOS (high 7.1)
- [CVE-2024-40786](https://insights.sbomify.com/CVE-2024-40786/): Information disclosure in iOS and iPadOS (high 7.5)
- [CVE-2024-40785](https://insights.sbomify.com/CVE-2024-40785/): Cross-site scripting in Safari (medium 6.1)
- [CVE-2024-40784](https://insights.sbomify.com/CVE-2024-40784/): Integer overflow in iOS and iPadOS (high 7.8)
- [CVE-2024-40783](https://insights.sbomify.com/CVE-2024-40783/): Security feature bypass in macOS (high 7.1)
- [CVE-2024-40782](https://insights.sbomify.com/CVE-2024-40782/): Use after free in Safari (critical 9.8)
- [CVE-2024-40781](https://insights.sbomify.com/CVE-2024-40781/): Privilege escalation in macOS (high 8.4)
- [CVE-2024-40780](https://insights.sbomify.com/CVE-2024-40780/): Memory corruption in Safari (medium 6.5)
- [CVE-2024-4078](https://insights.sbomify.com/CVE-2024-4078/): Arbitrary Code Execution in parisneo/lollms (critical 9.8)
- [CVE-2024-40779](https://insights.sbomify.com/CVE-2024-40779/): Memory corruption in Safari (medium 5.5)
- [CVE-2024-40778](https://insights.sbomify.com/CVE-2024-40778/): Auth bypass in iOS and iPadOS (low 3.3)
- [CVE-2024-40777](https://insights.sbomify.com/CVE-2024-40777/): Memory corruption in iOS and iPadOS (low 3.3)
- [CVE-2024-40776](https://insights.sbomify.com/CVE-2024-40776/): Use after free in Safari (medium 6.5)
- [CVE-2024-40775](https://insights.sbomify.com/CVE-2024-40775/): Information disclosure in macOS (medium 5.5)
- [CVE-2024-40774](https://insights.sbomify.com/CVE-2024-40774/): Security feature bypass in iOS and iPadOS (medium 5.9)
- [CVE-2024-40771](https://insights.sbomify.com/CVE-2024-40771/): Memory corruption in iOS and iPadOS (high 8.4)
- [CVE-2024-40770](https://insights.sbomify.com/CVE-2024-40770/): Missing authorization in macOS (high 7.5)
- [CVE-2024-4077](https://insights.sbomify.com/CVE-2024-4077/): WordPress UDesign theme <= 4.7.3 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-40767](https://insights.sbomify.com/CVE-2024-40767/): OpenStack Nova vulnerable to unauthorized access to potentially sensitive data (medium 6.5)
- [CVE-2024-40766](https://insights.sbomify.com/CVE-2024-40766/): SonicWall SonicOS Improper Access Control (critical 9.3, exploited in the wild)
- [CVE-2024-40765](https://insights.sbomify.com/CVE-2024-40765/): Integer overflow in SonicOS (critical 9.8)
- [CVE-2024-40764](https://insights.sbomify.com/CVE-2024-40764/): Memory corruption in SonicOS (high 7.5)
- [CVE-2024-40763](https://insights.sbomify.com/CVE-2024-40763/): Memory corruption in SMA100 (high 7.5)
- [CVE-2024-40762](https://insights.sbomify.com/CVE-2024-40762/): Weak cryptography in SonicOS (critical 9.8)
- [CVE-2024-40761](https://insights.sbomify.com/CVE-2024-40761/): Apache Answer: Avatar URL leaked user email addresses (medium 5.3)
- [CVE-2024-4076](https://insights.sbomify.com/CVE-2024-4076/): Assertion failure when serving both stale cache data and authoritative zone content (high 7.5)
- [CVE-2024-40754](https://insights.sbomify.com/CVE-2024-40754/): Memory corruption in Escargot (medium 6.9)
- [CVE-2024-40750](https://insights.sbomify.com/CVE-2024-40750/): Information disclosure in linksys:mbe7000 firmware (medium 5.3)
- [CVE-2024-4075](https://insights.sbomify.com/CVE-2024-4075/): Kashipara Online Furniture Shopping Ecommerce Website login.php cross site scripting (low 3.5)
- [CVE-2024-40749](https://insights.sbomify.com/CVE-2024-40749/): [20250103] - Core - Read ACL violation in multiple core views (high 7.5)
- [CVE-2024-40748](https://insights.sbomify.com/CVE-2024-40748/): [20250102] - Core - XSS vector in the id attribute of menu lists (high 7.5)
- [CVE-2024-40747](https://insights.sbomify.com/CVE-2024-40747/): [20250101] - Core - XSS vectors in module chromes (medium 6.1)
- [CVE-2024-40746](https://insights.sbomify.com/CVE-2024-40746/): Extension - hikashop.com - Stored cross site scripting vulnerability in Hikashop component for Joomla < 5.1.1 (medium 5.4)
- [CVE-2024-40745](https://insights.sbomify.com/CVE-2024-40745/): Extension - tassos.gr - Reflected Cross site scripting vulnerability in Convert Forms component for Joomla < 4.4.8 (medium 5.4)
- [CVE-2024-40744](https://insights.sbomify.com/CVE-2024-40744/): Extension - tassos.gr - Unrestricted file upload in Convert Forms component for Joomla < 4.4.8 (critical 9.8)
- [CVE-2024-40743](https://insights.sbomify.com/CVE-2024-40743/): [20240805] - Core - XSS vectors in Outputfilter::strip* methods (medium 6.1)
- [CVE-2024-40742](https://insights.sbomify.com/CVE-2024-40742/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40741](https://insights.sbomify.com/CVE-2024-40741/): Cross-site scripting in netbox:netbox (high 7.1)
- [CVE-2024-40740](https://insights.sbomify.com/CVE-2024-40740/): Cross-site scripting in netbox:netbox (high 7.1)
- [CVE-2024-4074](https://insights.sbomify.com/CVE-2024-4074/): Kashipara Online Furniture Shopping Ecommerce Website prodInfo.php cross site scripting (low 3.5)
- [CVE-2024-40739](https://insights.sbomify.com/CVE-2024-40739/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40738](https://insights.sbomify.com/CVE-2024-40738/): Cross-site scripting in netbox:netbox (high 7.1)
- [CVE-2024-40737](https://insights.sbomify.com/CVE-2024-40737/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40736](https://insights.sbomify.com/CVE-2024-40736/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40735](https://insights.sbomify.com/CVE-2024-40735/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40734](https://insights.sbomify.com/CVE-2024-40734/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40733](https://insights.sbomify.com/CVE-2024-40733/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40732](https://insights.sbomify.com/CVE-2024-40732/): Cross-site scripting in netbox:netbox (high 7.1)
- [CVE-2024-40731](https://insights.sbomify.com/CVE-2024-40731/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-40730](https://insights.sbomify.com/CVE-2024-40730/): Cross-site scripting in netbox:netbox (medium 6.1)
- [CVE-2024-4073](https://insights.sbomify.com/CVE-2024-4073/): Kashipara Online Furniture Shopping Ecommerce Website prodList.php cross site scripting (low 3.5)
- [CVE-2024-40729](https://insights.sbomify.com/CVE-2024-40729/): Cross-site scripting in netbox:netbox (high 7.1)
- [CVE-2024-40728](https://insights.sbomify.com/CVE-2024-40728/): Cross-site scripting in netbox:netbox (high 7.1)
- [CVE-2024-40727](https://insights.sbomify.com/CVE-2024-40727/): Cross-site scripting in netbox:netbox (medium 5.4)
- [CVE-2024-40726](https://insights.sbomify.com/CVE-2024-40726/): Cross-site scripting in netbox:netbox (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/304/