# Vulnerabilities published in 2024


- [CVE-2024-38071](https://insights.sbomify.com/CVE-2024-38071/): Windows Remote Desktop Licensing Service Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38070](https://insights.sbomify.com/CVE-2024-38070/): Windows LockDown Policy (WLDP) Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2024-3807](https://insights.sbomify.com/CVE-2024-3807/): Porto <= 7.1.0 - Authenticated (Contributor+) Local File Inclusion via Post Meta (high 8.8)
- [CVE-2024-38069](https://insights.sbomify.com/CVE-2024-38069/): Windows Enroll Engine Security Feature Bypass Vulnerability (high 7.0)
- [CVE-2024-38068](https://insights.sbomify.com/CVE-2024-38068/): Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38067](https://insights.sbomify.com/CVE-2024-38067/): Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38066](https://insights.sbomify.com/CVE-2024-38066/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38065](https://insights.sbomify.com/CVE-2024-38065/): Secure Boot Security Feature Bypass Vulnerability (medium 6.8)
- [CVE-2024-38064](https://insights.sbomify.com/CVE-2024-38064/): Windows TCP/IP Information Disclosure Vulnerability (high 7.5)
- [CVE-2024-38063](https://insights.sbomify.com/CVE-2024-38063/): Windows TCP/IP Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-38062](https://insights.sbomify.com/CVE-2024-38062/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38061](https://insights.sbomify.com/CVE-2024-38061/): DCOM Remote Cross-Session Activation Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2024-38060](https://insights.sbomify.com/CVE-2024-38060/): Windows Imaging Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-3806](https://insights.sbomify.com/CVE-2024-3806/): Porto <= 7.1.0 - Unauthenticated Local File Inclusion via porto_ajax_posts (critical 9.8)
- [CVE-2024-38059](https://insights.sbomify.com/CVE-2024-38059/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38058](https://insights.sbomify.com/CVE-2024-38058/): BitLocker Security Feature Bypass Vulnerability (medium 6.8)
- [CVE-2024-38057](https://insights.sbomify.com/CVE-2024-38057/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38056](https://insights.sbomify.com/CVE-2024-38056/): Microsoft Windows Codecs Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38055](https://insights.sbomify.com/CVE-2024-38055/): Microsoft Windows Codecs Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38054](https://insights.sbomify.com/CVE-2024-38054/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38053](https://insights.sbomify.com/CVE-2024-38053/): Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38052](https://insights.sbomify.com/CVE-2024-38052/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38051](https://insights.sbomify.com/CVE-2024-38051/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-38050](https://insights.sbomify.com/CVE-2024-38050/): Windows Workstation Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38049](https://insights.sbomify.com/CVE-2024-38049/): Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2024-38048](https://insights.sbomify.com/CVE-2024-38048/): Windows Network Driver Interface Specification (NDIS) Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-38047](https://insights.sbomify.com/CVE-2024-38047/): PowerShell Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38046](https://insights.sbomify.com/CVE-2024-38046/): PowerShell Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38045](https://insights.sbomify.com/CVE-2024-38045/): Windows TCP/IP Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-38044](https://insights.sbomify.com/CVE-2024-38044/): DHCP Server Service Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-38043](https://insights.sbomify.com/CVE-2024-38043/): PowerShell Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38041](https://insights.sbomify.com/CVE-2024-38041/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38040](https://insights.sbomify.com/CVE-2024-38040/): BUG-000167984 - Portal for ArcGIS has a Local file inclusion (LFI) vulnerability (high 7.5)
- [CVE-2024-3804](https://insights.sbomify.com/CVE-2024-3804/): Vesystem Cloud Desktop fileupload2.php unrestricted upload (medium 6.3)
- [CVE-2024-38039](https://insights.sbomify.com/CVE-2024-38039/): BUG-000161683 - HTML injection vulnerability in Portal for ArcGIS. (medium 5.4)
- [CVE-2024-38038](https://insights.sbomify.com/CVE-2024-38038/): BUG-000165732 - Reflected XSS in Portal for ArcGIS (medium 6.1)
- [CVE-2024-38037](https://insights.sbomify.com/CVE-2024-38037/): BUG-000167983 - Unvalidated redirect in Portal for ArcGIS (medium 6.1)
- [CVE-2024-38036](https://insights.sbomify.com/CVE-2024-38036/): BUG-000154827 - Reflected XSS in ArcGIS Experience Builder (medium 5.4)
- [CVE-2024-38034](https://insights.sbomify.com/CVE-2024-38034/): Windows Filtering Platform Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-38033](https://insights.sbomify.com/CVE-2024-38033/): PowerShell Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-38032](https://insights.sbomify.com/CVE-2024-38032/): Microsoft Xbox Remote Code Execution Vulnerability (high 7.1)
- [CVE-2024-38031](https://insights.sbomify.com/CVE-2024-38031/): Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38030](https://insights.sbomify.com/CVE-2024-38030/): Windows Themes Spoofing Vulnerability (medium 6.5)
- [CVE-2024-3803](https://insights.sbomify.com/CVE-2024-3803/): Vesystem Cloud Desktop fileupload.php unrestricted upload (medium 6.3)
- [CVE-2024-38029](https://insights.sbomify.com/CVE-2024-38029/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-38028](https://insights.sbomify.com/CVE-2024-38028/): Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-38027](https://insights.sbomify.com/CVE-2024-38027/): Windows Line Printer Daemon Service Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-38025](https://insights.sbomify.com/CVE-2024-38025/): Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-38024](https://insights.sbomify.com/CVE-2024-38024/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-38023](https://insights.sbomify.com/CVE-2024-38023/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-38022](https://insights.sbomify.com/CVE-2024-38022/): Windows Image Acquisition Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-38021](https://insights.sbomify.com/CVE-2024-38021/): Microsoft Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38020](https://insights.sbomify.com/CVE-2024-38020/): Microsoft Outlook Spoofing Vulnerability (medium 6.5)
- [CVE-2024-38019](https://insights.sbomify.com/CVE-2024-38019/): Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-38018](https://insights.sbomify.com/CVE-2024-38018/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-38017](https://insights.sbomify.com/CVE-2024-38017/): Microsoft Message Queuing Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-38016](https://insights.sbomify.com/CVE-2024-38016/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-38015](https://insights.sbomify.com/CVE-2024-38015/): Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability (high 7.5)
- [CVE-2024-38014](https://insights.sbomify.com/CVE-2024-38014/): Microsoft Windows Installer Improper Privilege Management (high 7.8, exploited in the wild)
- [CVE-2024-38013](https://insights.sbomify.com/CVE-2024-38013/): Microsoft Windows Server Backup Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2024-38011](https://insights.sbomify.com/CVE-2024-38011/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-38010](https://insights.sbomify.com/CVE-2024-38010/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-3801](https://insights.sbomify.com/CVE-2024-3801/): XSS in S@M CMS (medium 6.1)
- [CVE-2024-38002](https://insights.sbomify.com/CVE-2024-38002/): Liferay Portal and Liferay DXP Workflow Component Does Not Check User Permissions (critical 9.0)
- [CVE-2024-3800](https://insights.sbomify.com/CVE-2024-3800/): XSS in S@M CMS (medium 6.1)
- [CVE-2024-37999](https://insights.sbomify.com/CVE-2024-37999/): Privilege escalation in Medicalis Workflow Orchestrator (high 8.5)
- [CVE-2024-37998](https://insights.sbomify.com/CVE-2024-37998/): Auth bypass in CPCI85 Central Processing/Communication (critical 9.3)
- [CVE-2024-37997](https://insights.sbomify.com/CVE-2024-37997/): Memory corruption in JT Open (high 7.3)
- [CVE-2024-37996](https://insights.sbomify.com/CVE-2024-37996/): Null dereference in JT Open (medium 4.8)
- [CVE-2024-37995](https://insights.sbomify.com/CVE-2024-37995/): Denial of service in SIMATIC RF1140R (low 2.1)
- [CVE-2024-37994](https://insights.sbomify.com/CVE-2024-37994/): Misconfiguration in SIMATIC RF1140R (medium 5.3)
- [CVE-2024-37993](https://insights.sbomify.com/CVE-2024-37993/): Missing authorization in SIMATIC RF1140R (medium 6.9)
- [CVE-2024-37992](https://insights.sbomify.com/CVE-2024-37992/): Denial of service in SIMATIC RF1140R (medium 5.9)
- [CVE-2024-37991](https://insights.sbomify.com/CVE-2024-37991/): Missing authorization in SIMATIC RF1140R (medium 6.0)
- [CVE-2024-37990](https://insights.sbomify.com/CVE-2024-37990/): Misconfiguration in SIMATIC RF1140R (high 7.0)
- [CVE-2024-3799](https://insights.sbomify.com/CVE-2024-3799/): Shell command injection in Phoniebox (high 8.7)
- [CVE-2024-37989](https://insights.sbomify.com/CVE-2024-37989/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37988](https://insights.sbomify.com/CVE-2024-37988/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37987](https://insights.sbomify.com/CVE-2024-37987/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37986](https://insights.sbomify.com/CVE-2024-37986/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37985](https://insights.sbomify.com/CVE-2024-37985/): Windows Kernel Information Disclosure Vulnerability (medium 5.9)
- [CVE-2024-37984](https://insights.sbomify.com/CVE-2024-37984/): Secure Boot Security Feature Bypass Vulnerability (high 8.4)
- [CVE-2024-37983](https://insights.sbomify.com/CVE-2024-37983/): Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2024-37982](https://insights.sbomify.com/CVE-2024-37982/): Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2024-37981](https://insights.sbomify.com/CVE-2024-37981/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37980](https://insights.sbomify.com/CVE-2024-37980/): Microsoft SQL Server Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-3798](https://insights.sbomify.com/CVE-2024-3798/): Insecure handling of GET argument in Phoniebox (high 8.7)
- [CVE-2024-37979](https://insights.sbomify.com/CVE-2024-37979/): Windows Kernel Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2024-37978](https://insights.sbomify.com/CVE-2024-37978/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37977](https://insights.sbomify.com/CVE-2024-37977/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37976](https://insights.sbomify.com/CVE-2024-37976/): Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2024-37975](https://insights.sbomify.com/CVE-2024-37975/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37974](https://insights.sbomify.com/CVE-2024-37974/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37973](https://insights.sbomify.com/CVE-2024-37973/): Secure Boot Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2024-37972](https://insights.sbomify.com/CVE-2024-37972/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37971](https://insights.sbomify.com/CVE-2024-37971/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37970](https://insights.sbomify.com/CVE-2024-37970/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-3797](https://insights.sbomify.com/CVE-2024-3797/): SourceCodester QR Code Bookmark System sql injection (medium 6.3)
- [CVE-2024-37969](https://insights.sbomify.com/CVE-2024-37969/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-37968](https://insights.sbomify.com/CVE-2024-37968/): Windows DNS Spoofing Vulnerability (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/325/