# Vulnerabilities published in 2024


- [CVE-2024-30146](https://insights.sbomify.com/CVE-2024-30146/): HCL Domino Leap is affected by improper access control (medium 4.1)
- [CVE-2024-30145](https://insights.sbomify.com/CVE-2024-30145/): HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-30143](https://insights.sbomify.com/CVE-2024-30143/): A path traversal vulnerability in HCL AppScan Traffic Recorder (medium 4.3)
- [CVE-2024-30142](https://insights.sbomify.com/CVE-2024-30142/): HCL BigFix Compliance is affected by a missing secure flag on a cookie (low 3.8)
- [CVE-2024-30141](https://insights.sbomify.com/CVE-2024-30141/): HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information (medium 4.7)
- [CVE-2024-30140](https://insights.sbomify.com/CVE-2024-30140/): HCL BigFix Compliance is affected by unvalidated redirects and forwards (medium 5.4)
- [CVE-2024-3014](https://insights.sbomify.com/CVE-2024-3014/): SourceCodester Simple Subscription Website Actions.php sql injection (medium 6.3)
- [CVE-2024-30135](https://insights.sbomify.com/CVE-2024-30135/): Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10 (low 3.3)
- [CVE-2024-30134](https://insights.sbomify.com/CVE-2024-30134/): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability (medium 6.7)
- [CVE-2024-30133](https://insights.sbomify.com/CVE-2024-30133/): HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability (medium 5.3)
- [CVE-2024-30132](https://insights.sbomify.com/CVE-2024-30132/): Missing default HTTP security headers affect HCL Nomad server on Domino (low 3.7)
- [CVE-2024-30130](https://insights.sbomify.com/CVE-2024-30130/): HCL Nomad server on Domino is affected by a use of web browser cache containing sensitive information vulnerability (low 3.7)
- [CVE-2024-3013](https://insights.sbomify.com/CVE-2024-3013/): Teledyne FLIR AX8 User Registration test_login.php improper authorization (medium 5.3)
- [CVE-2024-30129](https://insights.sbomify.com/CVE-2024-30129/): HCL Nomad server on Domino is affected by a host header injection vulnerability (medium 5.3)
- [CVE-2024-30128](https://insights.sbomify.com/CVE-2024-30128/): An open proxy vulnerability affects HCL Nomad server on Domino (high 8.6)
- [CVE-2024-30127](https://insights.sbomify.com/CVE-2024-30127/): HCL Leap is affected by missing "no cache" headers (low 3.2)
- [CVE-2024-30126](https://insights.sbomify.com/CVE-2024-30126/): HCL BigFix Compliance is affected by a missing X-Frame-Options Header vulnerability (medium 4.7)
- [CVE-2024-30125](https://insights.sbomify.com/CVE-2024-30125/): HCL BigFix Compliance is affected by an internal server error (medium 6.2)
- [CVE-2024-30124](https://insights.sbomify.com/CVE-2024-30124/): HCL Sametime is impacted by insecure services (medium 4.0)
- [CVE-2024-30122](https://insights.sbomify.com/CVE-2024-30122/): HCL Sametime is impacted by misconfigured security related HTTP headers (medium 5.8)
- [CVE-2024-30120](https://insights.sbomify.com/CVE-2024-30120/): HCL DRYiCE Optibot Reset Station is impacted by an Unused Parameter in the web application (low 2.9)
- [CVE-2024-3012](https://insights.sbomify.com/CVE-2024-3012/): Tenda FH1205 GetParentControlInfo stack-based overflow (high 8.8)
- [CVE-2024-30119](https://insights.sbomify.com/CVE-2024-30119/): HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header (low 3.7)
- [CVE-2024-30118](https://insights.sbomify.com/CVE-2024-30118/): HCL Connections is susceptible to a sensitive information disclosure vulnerability (low 3.5)
- [CVE-2024-30117](https://insights.sbomify.com/CVE-2024-30117/): HCL BigFix Platform is affected by a DLL Hijack vulnerability (low 2.5)
- [CVE-2024-30115](https://insights.sbomify.com/CVE-2024-30115/): HCL Domino Volt and Domino Leap are affected by a cross-site scripting (XSS) vulnerability (medium 6.3)
- [CVE-2024-30114](https://insights.sbomify.com/CVE-2024-30114/): HCL Leap is affected by a cross-site scripting (XSS) vulnerability (low 3.7)
- [CVE-2024-30113](https://insights.sbomify.com/CVE-2024-30113/): HCL Leap is affected by a cross-site scripting (XSS) vulnerability (medium 6.3)
- [CVE-2024-30112](https://insights.sbomify.com/CVE-2024-30112/): HCL Connections is vulnerable to a cross-site scripting (XSS) vulnerability (medium 5.4)
- [CVE-2024-30111](https://insights.sbomify.com/CVE-2024-30111/): Missing Root Detection vulnerability affects DRYiCE AEX v10 (low 3.3)
- [CVE-2024-30110](https://insights.sbomify.com/CVE-2024-30110/): Lack of input validation vulnerability affects DRYiCE AEX v10 (low 3.7)
- [CVE-2024-3011](https://insights.sbomify.com/CVE-2024-3011/): Tenda FH1205 QuickIndex formQuickIndex stack-based overflow (high 8.8)
- [CVE-2024-30109](https://insights.sbomify.com/CVE-2024-30109/): Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10 (low 3.7)
- [CVE-2024-30107](https://insights.sbomify.com/CVE-2024-30107/): HCL Connections is vulnerable to broken access control (low 3.5)
- [CVE-2024-30106](https://insights.sbomify.com/CVE-2024-30106/): HCL Connections is vulnerable to an information disclosure vulnerability (low 3.5)
- [CVE-2024-30105](https://insights.sbomify.com/CVE-2024-30105/): .NET and Visual Studio Denial of Service Vulnerability (high 7.5)
- [CVE-2024-30104](https://insights.sbomify.com/CVE-2024-30104/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30103](https://insights.sbomify.com/CVE-2024-30103/): Microsoft Outlook Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30102](https://insights.sbomify.com/CVE-2024-30102/): Microsoft Office Remote Code Execution Vulnerability (high 7.3)
- [CVE-2024-30101](https://insights.sbomify.com/CVE-2024-30101/): Microsoft Office Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30100](https://insights.sbomify.com/CVE-2024-30100/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-3010](https://insights.sbomify.com/CVE-2024-3010/): Tenda FH1205 setcfm formSetCfm stack-based overflow (high 8.8)
- [CVE-2024-30099](https://insights.sbomify.com/CVE-2024-30099/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-30098](https://insights.sbomify.com/CVE-2024-30098/): Windows Cryptographic Services Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2024-30097](https://insights.sbomify.com/CVE-2024-30097/): Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30096](https://insights.sbomify.com/CVE-2024-30096/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-30095](https://insights.sbomify.com/CVE-2024-30095/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30094](https://insights.sbomify.com/CVE-2024-30094/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30093](https://insights.sbomify.com/CVE-2024-30093/): Windows Storage Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-30092](https://insights.sbomify.com/CVE-2024-30092/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.0)
- [CVE-2024-30091](https://insights.sbomify.com/CVE-2024-30091/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30090](https://insights.sbomify.com/CVE-2024-30090/): Microsoft Streaming Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-3009](https://insights.sbomify.com/CVE-2024-3009/): Tenda FH1205 WriteFacMac formWriteFacMac command injection (medium 6.3)
- [CVE-2024-30089](https://insights.sbomify.com/CVE-2024-30089/): Microsoft Streaming Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30088](https://insights.sbomify.com/CVE-2024-30088/): Microsoft Windows Kernel TOCTOU Race Condition (high 7.0, exploited in the wild)
- [CVE-2024-30087](https://insights.sbomify.com/CVE-2024-30087/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30086](https://insights.sbomify.com/CVE-2024-30086/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30085](https://insights.sbomify.com/CVE-2024-30085/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30084](https://insights.sbomify.com/CVE-2024-30084/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-30083](https://insights.sbomify.com/CVE-2024-30083/): Windows Standards-Based Storage Management Service Denial of Service Vulnerability (high 7.5)
- [CVE-2024-30082](https://insights.sbomify.com/CVE-2024-30082/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30081](https://insights.sbomify.com/CVE-2024-30081/): Windows NTLM Spoofing Vulnerability (high 7.1)
- [CVE-2024-30080](https://insights.sbomify.com/CVE-2024-30080/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-3008](https://insights.sbomify.com/CVE-2024-3008/): Tenda FH1205 execCommand formexeCommand stack-based overflow (high 8.8)
- [CVE-2024-30079](https://insights.sbomify.com/CVE-2024-30079/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30078](https://insights.sbomify.com/CVE-2024-30078/): Windows Wi-Fi Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30077](https://insights.sbomify.com/CVE-2024-30077/): Windows OLE Remote Code Execution Vulnerability (high 8.0)
- [CVE-2024-30076](https://insights.sbomify.com/CVE-2024-30076/): Windows Container Manager Service Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2024-30075](https://insights.sbomify.com/CVE-2024-30075/): Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability (high 8.0)
- [CVE-2024-30074](https://insights.sbomify.com/CVE-2024-30074/): Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability (high 8.0)
- [CVE-2024-30073](https://insights.sbomify.com/CVE-2024-30073/): Windows Security Zone Mapping Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2024-30072](https://insights.sbomify.com/CVE-2024-30072/): Microsoft Event Trace Log File Parsing Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30071](https://insights.sbomify.com/CVE-2024-30071/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 4.7)
- [CVE-2024-30070](https://insights.sbomify.com/CVE-2024-30070/): DHCP Server Service Denial of Service Vulnerability (high 7.5)
- [CVE-2024-3007](https://insights.sbomify.com/CVE-2024-3007/): Tenda FH1205 NatStaticSetting fromNatStaticSetting stack-based overflow (high 8.8)
- [CVE-2024-30069](https://insights.sbomify.com/CVE-2024-30069/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 4.7)
- [CVE-2024-30068](https://insights.sbomify.com/CVE-2024-30068/): Windows Kernel Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-30067](https://insights.sbomify.com/CVE-2024-30067/): Winlogon Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2024-30066](https://insights.sbomify.com/CVE-2024-30066/): Winlogon Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2024-30065](https://insights.sbomify.com/CVE-2024-30065/): Windows Themes Denial of Service Vulnerability (medium 5.5)
- [CVE-2024-30064](https://insights.sbomify.com/CVE-2024-30064/): Windows Kernel Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-30063](https://insights.sbomify.com/CVE-2024-30063/): Windows Distributed File System (DFS) Remote Code Execution Vulnerability (medium 6.7)
- [CVE-2024-30062](https://insights.sbomify.com/CVE-2024-30062/): Windows Standards-Based Storage Management Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30061](https://insights.sbomify.com/CVE-2024-30061/): Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability (high 7.3)
- [CVE-2024-30060](https://insights.sbomify.com/CVE-2024-30060/): Azure Monitor Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-3006](https://insights.sbomify.com/CVE-2024-3006/): Tenda FH1205 fromRouteStatic fromSetRouteStatic stack-based overflow (high 8.8)
- [CVE-2024-30059](https://insights.sbomify.com/CVE-2024-30059/): Microsoft Intune for Android Mobile Application Management Tampering Vulnerability (medium 6.1)
- [CVE-2024-30058](https://insights.sbomify.com/CVE-2024-30058/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 5.4)
- [CVE-2024-30057](https://insights.sbomify.com/CVE-2024-30057/): Microsoft Edge for iOS Spoofing Vulnerability (medium 5.4)
- [CVE-2024-30056](https://insights.sbomify.com/CVE-2024-30056/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (high 7.1)
- [CVE-2024-30055](https://insights.sbomify.com/CVE-2024-30055/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 5.4)
- [CVE-2024-30054](https://insights.sbomify.com/CVE-2024-30054/): Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-30053](https://insights.sbomify.com/CVE-2024-30053/): Azure Migrate Cross-Site Scripting Vulnerability (medium 6.5)
- [CVE-2024-30052](https://insights.sbomify.com/CVE-2024-30052/): Visual Studio Remote Code Execution Vulnerability (medium 4.7)
- [CVE-2024-30051](https://insights.sbomify.com/CVE-2024-30051/): Microsoft DWM Core Library Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2024-30050](https://insights.sbomify.com/CVE-2024-30050/): Windows Mark of the Web Security Feature Bypass Vulnerability (medium 5.4)
- [CVE-2024-3005](https://insights.sbomify.com/CVE-2024-3005/): Cross-site scripting in LA-Studio Element Kit for Elementor (medium 6.4)
- [CVE-2024-30049](https://insights.sbomify.com/CVE-2024-30049/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30048](https://insights.sbomify.com/CVE-2024-30048/): Dynamics 365 Customer Insights Spoofing Vulnerability (high 7.6)
- [CVE-2024-30047](https://insights.sbomify.com/CVE-2024-30047/): Dynamics 365 Customer Insights Spoofing Vulnerability (high 7.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/387/