# Vulnerabilities published in 2024


- [CVE-2024-36535](https://insights.sbomify.com/CVE-2024-36535/): Misconfiguration in layer5:meshery (critical 9.8)
- [CVE-2024-36534](https://insights.sbomify.com/CVE-2024-36534/): Insecure permissions in hwameistor v0.14.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. (high 8.4)
- [CVE-2024-36533](https://insights.sbomify.com/CVE-2024-36533/): Volcano has insecure permissions (critical 9.8)
- [CVE-2024-36532](https://insights.sbomify.com/CVE-2024-36532/): Insecure permissions in kruise v1.6.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token. (critical 10.0)
- [CVE-2024-36531](https://insights.sbomify.com/CVE-2024-36531/): Code injection in nukeviet:egovernment (medium 5.7)
- [CVE-2024-3653](https://insights.sbomify.com/CVE-2024-3653/): Undertow: learningpushhandler can lead to remote memory dos attacks (medium 5.3)
- [CVE-2024-36528](https://insights.sbomify.com/CVE-2024-36528/): nukeviet Deserialization of Untrusted Data vulnerability (high 8.8)
- [CVE-2024-36527](https://insights.sbomify.com/CVE-2024-36527/): puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. (medium 6.5)
- [CVE-2024-36526](https://insights.sbomify.com/CVE-2024-36526/): Hardcoded credentials in zkteco:zkbio cvsecurity (critical 9.8)
- [CVE-2024-36523](https://insights.sbomify.com/CVE-2024-36523/): Auth bypass in wvp-pro:gb28181 (medium 6.5)
- [CVE-2024-36522](https://insights.sbomify.com/CVE-2024-36522/): Apache Wicket: Remote code execution via XSLT injection (critical 9.8)
- [CVE-2024-3652](https://insights.sbomify.com/CVE-2024-3652/): IKEv1 default AH/ESP responder can cause libreswan to abort and restart (medium 6.5)
- [CVE-2024-36518](https://insights.sbomify.com/CVE-2024-36518/): SQL Injection (high 8.3)
- [CVE-2024-36517](https://insights.sbomify.com/CVE-2024-36517/): SQL Injection (high 8.3)
- [CVE-2024-36516](https://insights.sbomify.com/CVE-2024-36516/): SQL Injection (high 8.3)
- [CVE-2024-36515](https://insights.sbomify.com/CVE-2024-36515/): SQL Injection (high 8.3)
- [CVE-2024-36514](https://insights.sbomify.com/CVE-2024-36514/): SQL Injection (high 8.3)
- [CVE-2024-36513](https://insights.sbomify.com/CVE-2024-36513/): Privilege escalation in FortiClientWindows (high 7.4)
- [CVE-2024-36512](https://insights.sbomify.com/CVE-2024-36512/): Path traversal in FortiAnalyzer (high 7.0)
- [CVE-2024-36511](https://insights.sbomify.com/CVE-2024-36511/): Security feature bypass in FortiADC (low 3.4)
- [CVE-2024-36510](https://insights.sbomify.com/CVE-2024-36510/): Information disclosure in FortiClientEMS (medium 4.9)
- [CVE-2024-3651](https://insights.sbomify.com/CVE-2024-3651/): Denial of Service via Quadratic Complexity in kjd/idna (medium 6.2)
- [CVE-2024-36509](https://insights.sbomify.com/CVE-2024-36509/): Information disclosure in FortiWeb (low 3.8)
- [CVE-2024-36508](https://insights.sbomify.com/CVE-2024-36508/): Path traversal in FortiAnalyzer (medium 5.9)
- [CVE-2024-36507](https://insights.sbomify.com/CVE-2024-36507/): Other in FortiClientWindows (medium 6.7)
- [CVE-2024-36506](https://insights.sbomify.com/CVE-2024-36506/): Security feature bypass in FortiClientEMS (low 3.5)
- [CVE-2024-36505](https://insights.sbomify.com/CVE-2024-36505/): Security feature bypass in FortiOS (medium 4.7)
- [CVE-2024-36504](https://insights.sbomify.com/CVE-2024-36504/): Memory corruption in FortiOS (medium 6.2)
- [CVE-2024-36503](https://insights.sbomify.com/CVE-2024-36503/): Memory corruption in EMUI (high 7.3)
- [CVE-2024-36502](https://insights.sbomify.com/CVE-2024-36502/): Memory corruption in EMUI (high 7.9)
- [CVE-2024-36501](https://insights.sbomify.com/CVE-2024-36501/): Memory corruption in EMUI (medium 5.6)
- [CVE-2024-36500](https://insights.sbomify.com/CVE-2024-36500/): Privilege escalation in EMUI (high 7.8)
- [CVE-2024-3650](https://insights.sbomify.com/CVE-2024-3650/): Cross-site scripting in ElementsKit Elementor addons and Templates Library (medium 6.4)
- [CVE-2024-36499](https://insights.sbomify.com/CVE-2024-36499/): Missing authorization in EMUI (medium 6.8)
- [CVE-2024-36498](https://insights.sbomify.com/CVE-2024-36498/): Stored cross site scripting (medium 4.7)
- [CVE-2024-36497](https://insights.sbomify.com/CVE-2024-36497/): Unhashed Storage of Password (critical 9.1)
- [CVE-2024-36496](https://insights.sbomify.com/CVE-2024-36496/): Hardcoded Credentials (high 7.5)
- [CVE-2024-36495](https://insights.sbomify.com/CVE-2024-36495/): Read/Write Permissions for Everyone on Configuration File (high 7.7)
- [CVE-2024-36494](https://insights.sbomify.com/CVE-2024-36494/): Reflected Cross Site Scripting (medium 4.7)
- [CVE-2024-36493](https://insights.sbomify.com/CVE-2024-36493/): Memory corruption in Wavlink AC3000 (critical 9.1)
- [CVE-2024-36492](https://insights.sbomify.com/CVE-2024-36492/): Existing local user overwritten by malicious remote (high 7.4)
- [CVE-2024-36491](https://insights.sbomify.com/CVE-2024-36491/): Command injection in FutureNet NXR-120/C (critical 9.8)
- [CVE-2024-3649](https://insights.sbomify.com/CVE-2024-3649/): Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price Manipulation (medium 5.3)
- [CVE-2024-36489](https://insights.sbomify.com/CVE-2024-36489/): tls: fix missing memory barrier in tls_init (medium 5.5)
- [CVE-2024-36488](https://insights.sbomify.com/CVE-2024-36488/): Privilege escalation in Intel(R) DSA (medium 5.4)
- [CVE-2024-36486](https://insights.sbomify.com/CVE-2024-36486/): Privilege escalation in Parallels Desktop for Mac (high 7.8)
- [CVE-2024-36485](https://insights.sbomify.com/CVE-2024-36485/): SQL Injection (high 8.3)
- [CVE-2024-36484](https://insights.sbomify.com/CVE-2024-36484/): net: relax socket state check at accept time. (medium 5.5)
- [CVE-2024-36482](https://insights.sbomify.com/CVE-2024-36482/): Privilege escalation in Intel(R) CIP software (high 7.1)
- [CVE-2024-36481](https://insights.sbomify.com/CVE-2024-36481/): tracing/probes: fix error check in parse_btf_field() (medium 5.5)
- [CVE-2024-36480](https://insights.sbomify.com/CVE-2024-36480/): Hardcoded credentials in Ricoh Streamline NX PC Client (critical 9.8)
- [CVE-2024-3648](https://insights.sbomify.com/CVE-2024-3648/): Cross-site scripting in ShareThis Share Buttons (medium 6.4)
- [CVE-2024-36479](https://insights.sbomify.com/CVE-2024-36479/): fpga: bridge: add owner module and take its refcount (medium 5.5)
- [CVE-2024-36478](https://insights.sbomify.com/CVE-2024-36478/): null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (medium 5.5)
- [CVE-2024-36477](https://insights.sbomify.com/CVE-2024-36477/): tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (high 7.8)
- [CVE-2024-36476](https://insights.sbomify.com/CVE-2024-36476/): RDMA/rtrs: Ensure 'ib_sge list' is accessible (critical 9.8)
- [CVE-2024-36475](https://insights.sbomify.com/CVE-2024-36475/): Command injection in FutureNet NXR-120/C (high 7.2)
- [CVE-2024-36474](https://insights.sbomify.com/CVE-2024-36474/): Integer overflow in G Structured File Library (libgsf) (high 8.4)
- [CVE-2024-36473](https://insights.sbomify.com/CVE-2024-36473/): Other in Trend Micro VPN Proxy One Pro (medium 5.3)
- [CVE-2024-36472](https://insights.sbomify.com/CVE-2024-36472/): In GNOME Shell through 45.7, a portal helper can be launched automatically (without user confirmation) based on network responses provided b (medium 6.5)
- [CVE-2024-36471](https://insights.sbomify.com/CVE-2024-36471/): Apache Allura: sensitive information exposure via DNS rebinding (high 7.5)
- [CVE-2024-36470](https://insights.sbomify.com/CVE-2024-36470/): Auth bypass in TeamCity (high 8.1)
- [CVE-2024-3647](https://insights.sbomify.com/CVE-2024-3647/): Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'arrow_style' (medium 6.4)
- [CVE-2024-36469](https://insights.sbomify.com/CVE-2024-36469/): User enumeration via timing attack in Zabbix web interface (low 2.3)
- [CVE-2024-36468](https://insights.sbomify.com/CVE-2024-36468/): Stack buffer overflow in zbx_snmp_cache_handle_engineid (low 3.0)
- [CVE-2024-36467](https://insights.sbomify.com/CVE-2024-36467/): Authentication privilege escalation via user groups due to missing authorization checks (high 7.5)
- [CVE-2024-36466](https://insights.sbomify.com/CVE-2024-36466/): Unauthenticated Zabbix frontend takeover when SSO is being used (high 8.8)
- [CVE-2024-36465](https://insights.sbomify.com/CVE-2024-36465/): SQL injection in Zabbix API (high 8.6)
- [CVE-2024-36464](https://insights.sbomify.com/CVE-2024-36464/): Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported (low 2.7)
- [CVE-2024-36463](https://insights.sbomify.com/CVE-2024-36463/): Code injection in Zabbix (medium 6.5)
- [CVE-2024-36462](https://insights.sbomify.com/CVE-2024-36462/): Allocation of resources without limits or throttling (uncontrolled resource consumption) (high 7.5)
- [CVE-2024-36461](https://insights.sbomify.com/CVE-2024-36461/): Direct access to memory pointers within the JS engine for modification (critical 9.1)
- [CVE-2024-36460](https://insights.sbomify.com/CVE-2024-36460/): Front-end audit log shows passwords in plaintext (high 8.1)
- [CVE-2024-3646](https://insights.sbomify.com/CVE-2024-3646/): Command injection in Enterprise Server (high 8.0)
- [CVE-2024-36459](https://insights.sbomify.com/CVE-2024-36459/): Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent (high 8.4)
- [CVE-2024-36458](https://insights.sbomify.com/CVE-2024-36458/): Symantec Privileged Access Manager Privilege Escalation vulnerability (medium 5.1)
- [CVE-2024-36457](https://insights.sbomify.com/CVE-2024-36457/): Symantec Privileged Access Manager Authentication Bypass vulnerability (medium 5.3)
- [CVE-2024-36456](https://insights.sbomify.com/CVE-2024-36456/): Symantec Privileged Access Manager Remote Command Execution vulnerability (critical 9.4)
- [CVE-2024-36455](https://insights.sbomify.com/CVE-2024-36455/): Symantec Privileged Access Manager Remote Command Execution vulnerability (critical 9.4)
- [CVE-2024-36454](https://insights.sbomify.com/CVE-2024-36454/): Denial of service in IPCOM EX2 Series (V01L0x Series) (medium 5.3)
- [CVE-2024-36453](https://insights.sbomify.com/CVE-2024-36453/): Cross-site scripting in Usermin (medium 6.1)
- [CVE-2024-36452](https://insights.sbomify.com/CVE-2024-36452/): Cross-site request forgery in Webmin (low 3.1)
- [CVE-2024-36451](https://insights.sbomify.com/CVE-2024-36451/): Missing authorization in Webmin (high 8.8)
- [CVE-2024-36450](https://insights.sbomify.com/CVE-2024-36450/): Cross-site scripting in Webmin (medium 5.4)
- [CVE-2024-3645](https://insights.sbomify.com/CVE-2024-3645/): Cross-site scripting in Essential Addons for Elementor Pro (medium 6.4)
- [CVE-2024-36448](https://insights.sbomify.com/CVE-2024-36448/): Apache IoTDB Workbench: SSRF Vulnerability (EOL) (high 7.3)
- [CVE-2024-36446](https://insights.sbomify.com/CVE-2024-36446/): Auth bypass in mitel:mivoice mx-one (high 8.8)
- [CVE-2024-36445](https://insights.sbomify.com/CVE-2024-36445/): Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication. (critical 9.8)
- [CVE-2024-36444](https://insights.sbomify.com/CVE-2024-36444/): cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs. (high 8.1)
- [CVE-2024-36443](https://insights.sbomify.com/CVE-2024-36443/): Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP. (high 7.6)
- [CVE-2024-36442](https://insights.sbomify.com/CVE-2024-36442/): cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system. (high 8.8)
- [CVE-2024-36441](https://insights.sbomify.com/CVE-2024-36441/): Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that (medium 5.4)
- [CVE-2024-36440](https://insights.sbomify.com/CVE-2024-36440/): An issue was discovered on Swissphone DiCal-RED 4009 devices. (medium 6.8)
- [CVE-2024-3644](https://insights.sbomify.com/CVE-2024-3644/): Newsletter Popup <= 1.2 - Admin+ Stored XSS (medium 4.8)
- [CVE-2024-36439](https://insights.sbomify.com/CVE-2024-36439/): Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash (critical 9.4)
- [CVE-2024-36438](https://insights.sbomify.com/CVE-2024-36438/): eLinkSmart Hidden Smart Cabinet Lock 2024-05-22 has Incorrect Access Control and fails to perform an authorization check which can lead to c (high 7.3)
- [CVE-2024-36437](https://insights.sbomify.com/CVE-2024-36437/): The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (wi (medium 6.5)
- [CVE-2024-36435](https://insights.sbomify.com/CVE-2024-36435/): An issue was discovered on Supermicro BMC firmware in select X11, X12, H12, B12, X13, H13, and B13 motherboards (and CMM6 modules). (critical 9.8)
- [CVE-2024-36434](https://insights.sbomify.com/CVE-2024-36434/): An SMM callout vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4. (high 7.5)
- [CVE-2024-36433](https://insights.sbomify.com/CVE-2024-36433/): An arbitrary memory write vulnerability was discovered in Supermicro X11DPH-T, X11DPH-Tq, and X11DPH-i motherboards with BIOS firmware before 4.4. (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/337/