# Vulnerabilities published in 2024


- [CVE-2024-30341](https://insights.sbomify.com/CVE-2024-30341/): Foxit PDF Reader Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30340](https://insights.sbomify.com/CVE-2024-30340/): Foxit PDF Reader Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-3034](https://insights.sbomify.com/CVE-2024-3034/): BackUpWordPress <= 3.13 - Authenticated (Admin+) Directory Traversal (low 2.7)
- [CVE-2024-30339](https://insights.sbomify.com/CVE-2024-30339/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30338](https://insights.sbomify.com/CVE-2024-30338/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30337](https://insights.sbomify.com/CVE-2024-30337/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30336](https://insights.sbomify.com/CVE-2024-30336/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30335](https://insights.sbomify.com/CVE-2024-30335/): Foxit PDF Reader AcroForm Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-30334](https://insights.sbomify.com/CVE-2024-30334/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30333](https://insights.sbomify.com/CVE-2024-30333/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30332](https://insights.sbomify.com/CVE-2024-30332/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30331](https://insights.sbomify.com/CVE-2024-30331/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30330](https://insights.sbomify.com/CVE-2024-30330/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-3033](https://insights.sbomify.com/CVE-2024-3033/): Improper Authorization in mintplex-labs/anything-llm (critical 9.1)
- [CVE-2024-30329](https://insights.sbomify.com/CVE-2024-30329/): Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2024-30328](https://insights.sbomify.com/CVE-2024-30328/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30327](https://insights.sbomify.com/CVE-2024-30327/): Foxit PDF Reader template Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30326](https://insights.sbomify.com/CVE-2024-30326/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30325](https://insights.sbomify.com/CVE-2024-30325/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30324](https://insights.sbomify.com/CVE-2024-30324/): Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30323](https://insights.sbomify.com/CVE-2024-30323/): Foxit PDF Reader template Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30322](https://insights.sbomify.com/CVE-2024-30322/): Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30321](https://insights.sbomify.com/CVE-2024-30321/): Information disclosure in SIMATIC PCS 7 V9.1 (high 8.2)
- [CVE-2024-3032](https://insights.sbomify.com/CVE-2024-3032/): Themify Builder < 7.5.8 - Open Redirect (medium 6.1)
- [CVE-2024-30314](https://insights.sbomify.com/CVE-2024-30314/): Command injection in Dreamweaver Desktop (high 7.8)
- [CVE-2024-30312](https://insights.sbomify.com/CVE-2024-30312/): TALOS-2024-1952 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability (medium 5.5)
- [CVE-2024-30311](https://insights.sbomify.com/CVE-2024-30311/): TALOS-2024-1946 - Adobe Acrobat Reader Font gvar GlyphVariationData out-of-bounds read vulnerability (medium 5.5)
- [CVE-2024-30310](https://insights.sbomify.com/CVE-2024-30310/): ZDI-CAN-23327: Adobe Acrobat Reader DC PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-3031](https://insights.sbomify.com/CVE-2024-3031/): Fluid Notification Bar <= 3.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2024-30309](https://insights.sbomify.com/CVE-2024-30309/): Adobe Substance 3D Painter TGA File Parsing Acces Violation Read Vulnerability (medium 5.5)
- [CVE-2024-30308](https://insights.sbomify.com/CVE-2024-30308/): Adobe Substance 3D Painter PSD File Parsing Acces Violation Read Vulnerability (medium 5.5)
- [CVE-2024-30307](https://insights.sbomify.com/CVE-2024-30307/): Adobe Substance 3D Painter BMP File Parsing Out Of Bounds Write Vulnerability (high 7.8)
- [CVE-2024-30306](https://insights.sbomify.com/CVE-2024-30306/): ZDI-CAN-23106: Adobe Acrobat Reader DC AcroForm Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30305](https://insights.sbomify.com/CVE-2024-30305/): ZDI-CAN-23043: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30304](https://insights.sbomify.com/CVE-2024-30304/): ZDI-CAN-23040: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30303](https://insights.sbomify.com/CVE-2024-30303/): ZDI-CAN-23044: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30302](https://insights.sbomify.com/CVE-2024-30302/): ZDI-CAN-23077: Adobe Acrobat Reader DC AcroForm Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-30301](https://insights.sbomify.com/CVE-2024-30301/): ZDI-CAN-23042: Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30300](https://insights.sbomify.com/CVE-2024-30300/): Tenable Vulnerability Disclosure | Sensitive Information Disclosure Via Fake FMPS Worker (critical 9.8)
- [CVE-2024-3030](https://insights.sbomify.com/CVE-2024-3030/): Announce from the Dashboard <= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2024-30299](https://insights.sbomify.com/CVE-2024-30299/): Tenable Vulnerability Disclosure | API Auth Bypass (critical 10.0)
- [CVE-2024-30298](https://insights.sbomify.com/CVE-2024-30298/): Adobe Animate SWF File Parsing Memory corruption (medium 5.5)
- [CVE-2024-30297](https://insights.sbomify.com/CVE-2024-30297/): When Adobe Animate parses FLA files, there is a heap out-of-bounds write vulnerability at Animate.exe+0x125D391 (high 7.8)
- [CVE-2024-30296](https://insights.sbomify.com/CVE-2024-30296/): When Animate parses FLA files, there is an out-of-bounds write vulnerability at animate+0x123df28 (high 7.8)
- [CVE-2024-30295](https://insights.sbomify.com/CVE-2024-30295/): Null dereference in Animate (high 7.8)
- [CVE-2024-30294](https://insights.sbomify.com/CVE-2024-30294/): Adobe Animate OGG File Parsing Heap Memory Corruption remote code execution Vulnerability (high 7.8)
- [CVE-2024-30293](https://insights.sbomify.com/CVE-2024-30293/): Adobe Animate 2024 AI File parsing Stack base buffer overflow Remote Code execution Vulnerability (high 7.8)
- [CVE-2024-30292](https://insights.sbomify.com/CVE-2024-30292/): Adobe FrameMaker GIF File parsing Out Of Bound Write (high 7.8)
- [CVE-2024-30291](https://insights.sbomify.com/CVE-2024-30291/): Adobe FrameMaker TIF File parsing Out Of Bound Write (high 7.8)
- [CVE-2024-30290](https://insights.sbomify.com/CVE-2024-30290/): Adobe FrameMaker WEBP File Parsing Out Of Bound Write (high 7.8)
- [CVE-2024-3029](https://insights.sbomify.com/CVE-2024-3029/): Improper Input Validation in mintplex-labs/anything-llm (critical 9.0)
- [CVE-2024-30289](https://insights.sbomify.com/CVE-2024-30289/): Adobe FrameMaker XLS File Parsing Buffer Overflow (high 7.8)
- [CVE-2024-30288](https://insights.sbomify.com/CVE-2024-30288/): Adobe FrameMaker 3DS File Parsing Heap Memory Corruption (high 7.8)
- [CVE-2024-30287](https://insights.sbomify.com/CVE-2024-30287/): Adobe FrameMaker PDF File Pparsing Out of Bound Read (medium 5.5)
- [CVE-2024-30286](https://insights.sbomify.com/CVE-2024-30286/): Adobe FrameMaker DOC File Parsing Memory Corruption (medium 5.5)
- [CVE-2024-30285](https://insights.sbomify.com/CVE-2024-30285/): Adobe Audition 2024 MP4 File Parsing Null Pointer Dereference (medium 5.5)
- [CVE-2024-30284](https://insights.sbomify.com/CVE-2024-30284/): ZDI-CAN-23466: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30283](https://insights.sbomify.com/CVE-2024-30283/): Adobe FrameMaker ICO File Parsing Heap Memory Corruption (medium 5.5)
- [CVE-2024-30282](https://insights.sbomify.com/CVE-2024-30282/): Adobe Animate 2024 Out of Bound Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30281](https://insights.sbomify.com/CVE-2024-30281/): Substance3D - Designer | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2024-30280](https://insights.sbomify.com/CVE-2024-30280/): ZDI-CAN-22867: Adobe Acrobat Pro DC AcroForm Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-3028](https://insights.sbomify.com/CVE-2024-3028/): Improper Input Validation in mintplex-labs/anything-llm (high 7.2)
- [CVE-2024-30279](https://insights.sbomify.com/CVE-2024-30279/): ZDI-CAN-22887: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30278](https://insights.sbomify.com/CVE-2024-30278/): Adobe Media Encoder 2024 TGA File parsing memory corruption (medium 5.5)
- [CVE-2024-30276](https://insights.sbomify.com/CVE-2024-30276/): Adobe Audition 2024 M2V File Parsing Memory corruption (medium 5.5)
- [CVE-2024-30275](https://insights.sbomify.com/CVE-2024-30275/): Adobe Aero Beta has an arbitrary code execution vulnerability when parsing svg files (high 7.8)
- [CVE-2024-30274](https://insights.sbomify.com/CVE-2024-30274/): Adobe Substance 3D Painter ABC File Parsing An Out-Of-Bounds Write Vulnerability (high 7.8)
- [CVE-2024-30273](https://insights.sbomify.com/CVE-2024-30273/): Adobe Illustrator 2024 PS file Parsing Stack based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30272](https://insights.sbomify.com/CVE-2024-30272/): Adobe Illustrator 2024 GIF file parsing Out-Of-Bound Write remote code execution vulnerabiity (high 7.8)
- [CVE-2024-30271](https://insights.sbomify.com/CVE-2024-30271/): Adobe Illustrator 2023 CC 27.7 Memory Corruption Out-Of-Bounds-Write Vulnerability III. (high 7.8)
- [CVE-2024-30270](https://insights.sbomify.com/CVE-2024-30270/): mailcow Path Traversal and Arbitrary Code Execution Vulnerability (medium 6.2)
- [CVE-2024-3027](https://insights.sbomify.com/CVE-2024-3027/): Smart Slider 3 <= 3.5.1.22 - Missing Authorization to Limited File Upload (medium 6.4)
- [CVE-2024-30269](https://insights.sbomify.com/CVE-2024-30269/): DataEase has database configuration information exposure vulnerability (medium 5.3)
- [CVE-2024-30268](https://insights.sbomify.com/CVE-2024-30268/): Cacti XSS vulnerability in display_settings (medium 6.1)
- [CVE-2024-30266](https://insights.sbomify.com/CVE-2024-30266/): Wasmtime vulnerable to panic when using a dropped extenref-typed element segment (low 3.3)
- [CVE-2024-30265](https://insights.sbomify.com/CVE-2024-30265/): Voilà Local file inclusion (high 7.5)
- [CVE-2024-30264](https://insights.sbomify.com/CVE-2024-30264/): typebot.io: `GHSL-2024-040` (high 8.1)
- [CVE-2024-30263](https://insights.sbomify.com/CVE-2024-30263/): The PDF Viewer macro can be used to view PDF attachments with restricted access (high 7.7)
- [CVE-2024-30262](https://insights.sbomify.com/CVE-2024-30262/): Contao's remember-me tokens will not be cleared after a password change (medium 5.9)
- [CVE-2024-30261](https://insights.sbomify.com/CVE-2024-30261/): Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect (low 2.6)
- [CVE-2024-30260](https://insights.sbomify.com/CVE-2024-30260/): Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline (low 3.9)
- [CVE-2024-3026](https://insights.sbomify.com/CVE-2024-3026/): WordPress Button Plugin MaxButtons < 9.7.8 - Editor+ Stored XSS (medium 5.4)
- [CVE-2024-30259](https://insights.sbomify.com/CVE-2024-30259/): FastDDS heap buffer overflow when publisher sends malformed packet (high 8.2)
- [CVE-2024-30258](https://insights.sbomify.com/CVE-2024-30258/): FastDDS crash when publisher send malformed packet (high 8.2)
- [CVE-2024-30257](https://insights.sbomify.com/CVE-2024-30257/): 1Panel's password verification is suspected to have a timing attack vulnerability (low 3.9)
- [CVE-2024-30256](https://insights.sbomify.com/CVE-2024-30256/): Open WebUI vulnerable to server-side request forgery in utils.py (medium 6.4)
- [CVE-2024-30255](https://insights.sbomify.com/CVE-2024-30255/): HTTP/2: CPU exhaustion due to CONTINUATION frame flood (medium 5.3)
- [CVE-2024-30254](https://insights.sbomify.com/CVE-2024-30254/): Directory traversal allowing overwriting arbitrary files (medium 5.8)
- [CVE-2024-30253](https://insights.sbomify.com/CVE-2024-30253/): Handling untrusted input can result in a crash, leading to loss of availability / denial of service (high 7.5)
- [CVE-2024-30252](https://insights.sbomify.com/CVE-2024-30252/): GitHub Security Lab (GHSL) Vulnerability Report, livemarks: `GHSL-2024-015` (low 2.6)
- [CVE-2024-30251](https://insights.sbomify.com/CVE-2024-30251/): Denial of service when trying to parse malformed POST requests in aiohttp (high 7.5)
- [CVE-2024-30250](https://insights.sbomify.com/CVE-2024-30250/): In Astro-Shield, setting a correct `integrity` attribute to injected code allows to bypass the allow-lists (high 7.5)
- [CVE-2024-3025](https://insights.sbomify.com/CVE-2024-3025/): Path Traversal in mintplex-labs/anything-llm (critical 9.9)
- [CVE-2024-30249](https://insights.sbomify.com/CVE-2024-30249/): Cloudburst Network DoS in RakNet connection handling (high 8.6)
- [CVE-2024-30248](https://insights.sbomify.com/CVE-2024-30248/): Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page (high 7.7)
- [CVE-2024-30247](https://insights.sbomify.com/CVE-2024-30247/): Command Injection as root in NextCloudPi web panel (critical 10.0)
- [CVE-2024-30246](https://insights.sbomify.com/CVE-2024-30246/): Tuleap deleting or moving an artifact can delete values from unrelated artifacts (high 7.6)
- [CVE-2024-30245](https://insights.sbomify.com/CVE-2024-30245/): WordPress DecaLog plugin <= 3.9.0 - SQL Injection vulnerability (high 7.6)
- [CVE-2024-30244](https://insights.sbomify.com/CVE-2024-30244/): WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability (high 8.5)
- [CVE-2024-30243](https://insights.sbomify.com/CVE-2024-30243/): WordPress Tooltips plugin < 9.4.5 - Auth. SQL Injection vulnerability (high 8.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/385/