# Vulnerabilities published in 2024


- [CVE-2024-36213](https://insights.sbomify.com/CVE-2024-36213/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36212](https://insights.sbomify.com/CVE-2024-36212/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36211](https://insights.sbomify.com/CVE-2024-36211/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36210](https://insights.sbomify.com/CVE-2024-36210/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3621](https://insights.sbomify.com/CVE-2024-3621/): SourceCodester Kortex Lite Advocate Office Management System register_case.php sql injection (medium 4.7)
- [CVE-2024-36209](https://insights.sbomify.com/CVE-2024-36209/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36208](https://insights.sbomify.com/CVE-2024-36208/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36207](https://insights.sbomify.com/CVE-2024-36207/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36206](https://insights.sbomify.com/CVE-2024-36206/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36205](https://insights.sbomify.com/CVE-2024-36205/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36204](https://insights.sbomify.com/CVE-2024-36204/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36203](https://insights.sbomify.com/CVE-2024-36203/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36202](https://insights.sbomify.com/CVE-2024-36202/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36201](https://insights.sbomify.com/CVE-2024-36201/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36200](https://insights.sbomify.com/CVE-2024-36200/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3620](https://insights.sbomify.com/CVE-2024-3620/): SourceCodester Kortex Lite Advocate Office Management System adds.php sql injection (medium 4.7)
- [CVE-2024-36199](https://insights.sbomify.com/CVE-2024-36199/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36198](https://insights.sbomify.com/CVE-2024-36198/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36197](https://insights.sbomify.com/CVE-2024-36197/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36196](https://insights.sbomify.com/CVE-2024-36196/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36195](https://insights.sbomify.com/CVE-2024-36195/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36194](https://insights.sbomify.com/CVE-2024-36194/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36193](https://insights.sbomify.com/CVE-2024-36193/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36192](https://insights.sbomify.com/CVE-2024-36192/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36191](https://insights.sbomify.com/CVE-2024-36191/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36190](https://insights.sbomify.com/CVE-2024-36190/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3619](https://insights.sbomify.com/CVE-2024-3619/): SourceCodester Kortex Lite Advocate Office Management System addcase_stage.php sql injection (medium 4.7)
- [CVE-2024-36189](https://insights.sbomify.com/CVE-2024-36189/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36188](https://insights.sbomify.com/CVE-2024-36188/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36187](https://insights.sbomify.com/CVE-2024-36187/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36186](https://insights.sbomify.com/CVE-2024-36186/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36185](https://insights.sbomify.com/CVE-2024-36185/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36184](https://insights.sbomify.com/CVE-2024-36184/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36183](https://insights.sbomify.com/CVE-2024-36183/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36182](https://insights.sbomify.com/CVE-2024-36182/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36181](https://insights.sbomify.com/CVE-2024-36181/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36180](https://insights.sbomify.com/CVE-2024-36180/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3618](https://insights.sbomify.com/CVE-2024-3618/): SourceCodester Kortex Lite Advocate Office Management System activate_case.php sql injection (medium 4.7)
- [CVE-2024-36179](https://insights.sbomify.com/CVE-2024-36179/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36178](https://insights.sbomify.com/CVE-2024-36178/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36177](https://insights.sbomify.com/CVE-2024-36177/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36176](https://insights.sbomify.com/CVE-2024-36176/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36175](https://insights.sbomify.com/CVE-2024-36175/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36174](https://insights.sbomify.com/CVE-2024-36174/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36173](https://insights.sbomify.com/CVE-2024-36173/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36172](https://insights.sbomify.com/CVE-2024-36172/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36171](https://insights.sbomify.com/CVE-2024-36171/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36170](https://insights.sbomify.com/CVE-2024-36170/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3617](https://insights.sbomify.com/CVE-2024-3617/): SourceCodester Kortex Lite Advocate Office Management System deactivate_case.php sql injection (medium 4.7)
- [CVE-2024-36169](https://insights.sbomify.com/CVE-2024-36169/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36168](https://insights.sbomify.com/CVE-2024-36168/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36167](https://insights.sbomify.com/CVE-2024-36167/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36166](https://insights.sbomify.com/CVE-2024-36166/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36165](https://insights.sbomify.com/CVE-2024-36165/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36164](https://insights.sbomify.com/CVE-2024-36164/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36163](https://insights.sbomify.com/CVE-2024-36163/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36162](https://insights.sbomify.com/CVE-2024-36162/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36161](https://insights.sbomify.com/CVE-2024-36161/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36160](https://insights.sbomify.com/CVE-2024-36160/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3616](https://insights.sbomify.com/CVE-2024-3616/): SourceCodester Warehouse Management System pengguna.php cross site scripting (low 3.5)
- [CVE-2024-36159](https://insights.sbomify.com/CVE-2024-36159/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36158](https://insights.sbomify.com/CVE-2024-36158/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36157](https://insights.sbomify.com/CVE-2024-36157/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36156](https://insights.sbomify.com/CVE-2024-36156/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36155](https://insights.sbomify.com/CVE-2024-36155/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36154](https://insights.sbomify.com/CVE-2024-36154/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36153](https://insights.sbomify.com/CVE-2024-36153/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36152](https://insights.sbomify.com/CVE-2024-36152/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36151](https://insights.sbomify.com/CVE-2024-36151/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36150](https://insights.sbomify.com/CVE-2024-36150/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-3615](https://insights.sbomify.com/CVE-2024-3615/): Media Library Folders <= 8.2.0 - Reflected Cross-Site Scripting via 's' (medium 6.1)
- [CVE-2024-36149](https://insights.sbomify.com/CVE-2024-36149/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36148](https://insights.sbomify.com/CVE-2024-36148/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36147](https://insights.sbomify.com/CVE-2024-36147/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36146](https://insights.sbomify.com/CVE-2024-36146/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36144](https://insights.sbomify.com/CVE-2024-36144/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36143](https://insights.sbomify.com/CVE-2024-36143/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36142](https://insights.sbomify.com/CVE-2024-36142/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36141](https://insights.sbomify.com/CVE-2024-36141/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-36140](https://insights.sbomify.com/CVE-2024-36140/): Cross-site scripting in OZW672 (high 8.2)
- [CVE-2024-3614](https://insights.sbomify.com/CVE-2024-3614/): SourceCodester Warehouse Management System customer.php cross site scripting (low 3.5)
- [CVE-2024-36138](https://insights.sbomify.com/CVE-2024-36138/): Command injection in Node (high 8.1)
- [CVE-2024-36137](https://insights.sbomify.com/CVE-2024-36137/): Security feature bypass in Node (low 3.3)
- [CVE-2024-36136](https://insights.sbomify.com/CVE-2024-36136/): Memory corruption in Avalanche (high 7.5)
- [CVE-2024-36132](https://insights.sbomify.com/CVE-2024-36132/): Auth bypass in EPMM (high 8.2)
- [CVE-2024-36131](https://insights.sbomify.com/CVE-2024-36131/): Deserialization in EPMM (high 8.8)
- [CVE-2024-36130](https://insights.sbomify.com/CVE-2024-36130/): Missing authorization in EPMM (critical 9.8)
- [CVE-2024-3613](https://insights.sbomify.com/CVE-2024-3613/): SourceCodester Warehouse Management System supplier.php cross site scripting (low 3.5)
- [CVE-2024-36129](https://insights.sbomify.com/CVE-2024-36129/): OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC (high 8.2)
- [CVE-2024-36128](https://insights.sbomify.com/CVE-2024-36128/): Directus is soft-locked by providing a string value to random string util (high 7.5)
- [CVE-2024-36127](https://insights.sbomify.com/CVE-2024-36127/): apko Exposure of HTTP basic auth credentials in log output (high 7.5)
- [CVE-2024-36124](https://insights.sbomify.com/CVE-2024-36124/): iq80 Snappy has an out-of-bounds read when uncompressing data, leading to JVM crash (medium 5.3)
- [CVE-2024-36123](https://insights.sbomify.com/CVE-2024-36123/): Citizen has a Stored Cross-Site Scripting Vulnerability by editing MediaWiki:Tagline (medium 6.5)
- [CVE-2024-36122](https://insights.sbomify.com/CVE-2024-36122/): Discourse doesn't limit reviewable user serializer payload (low 2.4)
- [CVE-2024-36121](https://insights.sbomify.com/CVE-2024-36121/): netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces (medium 5.9)
- [CVE-2024-36120](https://insights.sbomify.com/CVE-2024-36120/): javascript-deobfuscator crafted payload can lead to code execution (high 8.2)
- [CVE-2024-3612](https://insights.sbomify.com/CVE-2024-3612/): SourceCodester Warehouse Management System barang.php cross site scripting (low 3.5)
- [CVE-2024-36119](https://insights.sbomify.com/CVE-2024-36119/): Password confirmation stored in plain text via registration form in statamic/cms (low 1.8)
- [CVE-2024-36118](https://insights.sbomify.com/CVE-2024-36118/): Unauthorized viewing of workspace test cases in MeterSphere (low 3.5)
- [CVE-2024-36117](https://insights.sbomify.com/CVE-2024-36117/): Path traversal while serving Reposilite javadoc expanded files (high 8.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/340/