# Vulnerabilities published in 2024


- [CVE-2024-30443](https://insights.sbomify.com/CVE-2024-30443/): WordPress GS Testimonial Slider plugin <= 3.1.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30442](https://insights.sbomify.com/CVE-2024-30442/): WordPress Bold Page Builder plugin <= 4.8.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30441](https://insights.sbomify.com/CVE-2024-30441/): WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-30440](https://insights.sbomify.com/CVE-2024-30440/): WordPress Themify Event Post plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2024-3044](https://insights.sbomify.com/CVE-2024-3044/): Graphic on-click binding allows unchecked script execution (medium 6.5)
- [CVE-2024-30439](https://insights.sbomify.com/CVE-2024-30439/): WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-30438](https://insights.sbomify.com/CVE-2024-30438/): WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30437](https://insights.sbomify.com/CVE-2024-30437/): WordPress Webinar and Video Conference with Jitsi Meet plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30436](https://insights.sbomify.com/CVE-2024-30436/): WordPress Collect.chat plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30435](https://insights.sbomify.com/CVE-2024-30435/): WordPress Nexter Blocks plugin <= 3.2.5 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-30434](https://insights.sbomify.com/CVE-2024-30434/): WordPress WP-CRM System plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2024-30433](https://insights.sbomify.com/CVE-2024-30433/): WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30432](https://insights.sbomify.com/CVE-2024-30432/): WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30431](https://insights.sbomify.com/CVE-2024-30431/): WordPress Mang Board WP plugin <= 1.8.0 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-30430](https://insights.sbomify.com/CVE-2024-30430/): WordPress FluentCRM plugin <= 2.8.44 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2024-3043](https://insights.sbomify.com/CVE-2024-3043/): Zigbee co-ordinator realignment packet may lead to denial of service (high 7.5)
- [CVE-2024-30429](https://insights.sbomify.com/CVE-2024-30429/): WordPress wp-forecast plugin <= 9.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30428](https://insights.sbomify.com/CVE-2024-30428/): WordPress Contest Gallery plugin <= 24.0.3 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-30427](https://insights.sbomify.com/CVE-2024-30427/): WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability (medium 5.4)
- [CVE-2024-30426](https://insights.sbomify.com/CVE-2024-30426/): WordPress Hash Elements plugin <= 1.3.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30425](https://insights.sbomify.com/CVE-2024-30425/): WordPress Beaver Builder plugin <= 2.7.4.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30424](https://insights.sbomify.com/CVE-2024-30424/): WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30423](https://insights.sbomify.com/CVE-2024-30423/): WordPress Better Elementor Addons plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30422](https://insights.sbomify.com/CVE-2024-30422/): WordPress Elementor Addon Elements plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30421](https://insights.sbomify.com/CVE-2024-30421/): WordPress Events Manager plugin <= 6.4.7.1 - Cross Site Request Forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2024-30420](https://insights.sbomify.com/CVE-2024-30420/): Server-side request forgery in a-blog cms Ver.3.0.x series (medium 4.4)
- [CVE-2024-3042](https://insights.sbomify.com/CVE-2024-3042/): SourceCodester Simple Subscription Website manage_user.php sql injection (medium 6.3)
- [CVE-2024-30419](https://insights.sbomify.com/CVE-2024-30419/): Cross-site scripting in a-blog cms (medium 5.4)
- [CVE-2024-30418](https://insights.sbomify.com/CVE-2024-30418/): Missing authorization in EMUI (high 7.5)
- [CVE-2024-30417](https://insights.sbomify.com/CVE-2024-30417/): Path traversal in EMUI (high 7.5)
- [CVE-2024-30416](https://insights.sbomify.com/CVE-2024-30416/): Use after free in EMUI (high 7.5)
- [CVE-2024-30415](https://insights.sbomify.com/CVE-2024-30415/): Missing authorization in EMUI (critical 9.1)
- [CVE-2024-30414](https://insights.sbomify.com/CVE-2024-30414/): Command injection in EMUI (high 7.5)
- [CVE-2024-30413](https://insights.sbomify.com/CVE-2024-30413/): Misconfiguration in EMUI (high 7.5)
- [CVE-2024-30410](https://insights.sbomify.com/CVE-2024-30410/): Junos OS: EX4300 Series: Loopback filter not blocking traffic despite having discard term. (medium 6.9)
- [CVE-2024-3041](https://insights.sbomify.com/CVE-2024-3041/): Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection (medium 6.3)
- [CVE-2024-30409](https://insights.sbomify.com/CVE-2024-30409/): Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS). (medium 6.9)
- [CVE-2024-30407](https://insights.sbomify.com/CVE-2024-30407/): [Child CVE] JCNR and cRPD: Hard-coded SSH host keys in cRPD may allow Person-in-the-Middle (PitM) attacks (critical 9.2)
- [CVE-2024-30406](https://insights.sbomify.com/CVE-2024-30406/): Information disclosure in Junos OS Evolved (medium 6.7)
- [CVE-2024-30405](https://insights.sbomify.com/CVE-2024-30405/): Denial of service in Junos OS (high 8.7)
- [CVE-2024-30403](https://insights.sbomify.com/CVE-2024-30403/): Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes (high 7.1)
- [CVE-2024-30402](https://insights.sbomify.com/CVE-2024-30402/): Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription (high 8.2)
- [CVE-2024-30401](https://insights.sbomify.com/CVE-2024-30401/): Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman (high 8.2)
- [CVE-2024-3040](https://insights.sbomify.com/CVE-2024-3040/): Netentsec NS-ASG Application Security Gateway list_crl_conf sql injection (medium 6.3)
- [CVE-2024-30398](https://insights.sbomify.com/CVE-2024-30398/): Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash (high 8.7)
- [CVE-2024-30397](https://insights.sbomify.com/CVE-2024-30397/): Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process (high 8.7)
- [CVE-2024-30395](https://insights.sbomify.com/CVE-2024-30395/): Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash (high 8.7)
- [CVE-2024-30394](https://insights.sbomify.com/CVE-2024-30394/): Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash (high 8.7)
- [CVE-2024-30392](https://insights.sbomify.com/CVE-2024-30392/): Memory corruption in Junos OS (high 8.7)
- [CVE-2024-30391](https://insights.sbomify.com/CVE-2024-30391/): Auth bypass in Junos OS (medium 6.3)
- [CVE-2024-30390](https://insights.sbomify.com/CVE-2024-30390/): Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced (medium 6.9)
- [CVE-2024-3039](https://insights.sbomify.com/CVE-2024-3039/): Shanghai Brad Technology BladeX API export-user sql injection (medium 6.3)
- [CVE-2024-30389](https://insights.sbomify.com/CVE-2024-30389/): Junos OS: EX4300 Series: Firewall filter not blocking egress traffic (medium 6.9)
- [CVE-2024-30388](https://insights.sbomify.com/CVE-2024-30388/): Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps (high 7.1)
- [CVE-2024-30387](https://insights.sbomify.com/CVE-2024-30387/): Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash (high 7.1)
- [CVE-2024-30386](https://insights.sbomify.com/CVE-2024-30386/): Use after free in Junos OS (high 7.1)
- [CVE-2024-30384](https://insights.sbomify.com/CVE-2024-30384/): Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur (medium 6.8)
- [CVE-2024-30382](https://insights.sbomify.com/CVE-2024-30382/): Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured (high 8.7)
- [CVE-2024-30381](https://insights.sbomify.com/CVE-2024-30381/): Paragon Active Assurance: probe_serviced exposes internal objects to local users (high 8.4)
- [CVE-2024-30380](https://insights.sbomify.com/CVE-2024-30380/): Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV (high 7.1)
- [CVE-2024-30378](https://insights.sbomify.com/CVE-2024-30378/): Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands (medium 6.9)
- [CVE-2024-30377](https://insights.sbomify.com/CVE-2024-30377/): G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2024-30376](https://insights.sbomify.com/CVE-2024-30376/): Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (high 7.3)
- [CVE-2024-30375](https://insights.sbomify.com/CVE-2024-30375/): Luxion KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30374](https://insights.sbomify.com/CVE-2024-30374/): Luxion KeyShot Viewer KSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30373](https://insights.sbomify.com/CVE-2024-30373/): Kofax Power PDF JPF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30372](https://insights.sbomify.com/CVE-2024-30372/): Allegra getLinkText Server-Side Template Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30371](https://insights.sbomify.com/CVE-2024-30371/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30370](https://insights.sbomify.com/CVE-2024-30370/): RARLAB WinRAR Mark-Of-The-Web Bypass Vulnerability (medium 4.3)
- [CVE-2024-3037](https://insights.sbomify.com/CVE-2024-3037/): Arbitrary File Deletion in PaperCut NG/MF Web Print (high 7.8)
- [CVE-2024-30369](https://insights.sbomify.com/CVE-2024-30369/): A10 Thunder ADC Incorrect Permission Assignment Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2024-30368](https://insights.sbomify.com/CVE-2024-30368/): A10 Thunder ADC CsrRequestView Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-30367](https://insights.sbomify.com/CVE-2024-30367/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30366](https://insights.sbomify.com/CVE-2024-30366/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30365](https://insights.sbomify.com/CVE-2024-30365/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30364](https://insights.sbomify.com/CVE-2024-30364/): Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-30363](https://insights.sbomify.com/CVE-2024-30363/): Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-30362](https://insights.sbomify.com/CVE-2024-30362/): Foxit PDF Reader PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30361](https://insights.sbomify.com/CVE-2024-30361/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30360](https://insights.sbomify.com/CVE-2024-30360/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-3036](https://insights.sbomify.com/CVE-2024-3036/): Communication DoS vulnerability (medium 6.9)
- [CVE-2024-30359](https://insights.sbomify.com/CVE-2024-30359/): Foxit PDF Reader AcroForm 3D Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30358](https://insights.sbomify.com/CVE-2024-30358/): Foxit PDF Reader AcroForm User-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30357](https://insights.sbomify.com/CVE-2024-30357/): Foxit PDF Reader AcroForm Annotation Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30356](https://insights.sbomify.com/CVE-2024-30356/): Foxit PDF Reader AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-30355](https://insights.sbomify.com/CVE-2024-30355/): Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30354](https://insights.sbomify.com/CVE-2024-30354/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30353](https://insights.sbomify.com/CVE-2024-30353/): Foxit PDF Reader AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30352](https://insights.sbomify.com/CVE-2024-30352/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30351](https://insights.sbomify.com/CVE-2024-30351/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30350](https://insights.sbomify.com/CVE-2024-30350/): Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-3035](https://insights.sbomify.com/CVE-2024-3035/): Authorization Bypass Through User-Controlled Key in GitLab (medium 6.8)
- [CVE-2024-30349](https://insights.sbomify.com/CVE-2024-30349/): Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30348](https://insights.sbomify.com/CVE-2024-30348/): Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30347](https://insights.sbomify.com/CVE-2024-30347/): Foxit PDF Reader U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-30346](https://insights.sbomify.com/CVE-2024-30346/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30345](https://insights.sbomify.com/CVE-2024-30345/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30344](https://insights.sbomify.com/CVE-2024-30344/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30343](https://insights.sbomify.com/CVE-2024-30343/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30342](https://insights.sbomify.com/CVE-2024-30342/): Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/384/