# Vulnerabilities published in 2024


- [CVE-2024-30046](https://insights.sbomify.com/CVE-2024-30046/): Visual Studio Denial of Service Vulnerability (medium 5.9)
- [CVE-2024-30045](https://insights.sbomify.com/CVE-2024-30045/): .NET and Visual Studio Remote Code Execution Vulnerability (medium 6.3)
- [CVE-2024-30044](https://insights.sbomify.com/CVE-2024-30044/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-30043](https://insights.sbomify.com/CVE-2024-30043/): Microsoft SharePoint Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-30042](https://insights.sbomify.com/CVE-2024-30042/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-30041](https://insights.sbomify.com/CVE-2024-30041/): Microsoft Bing Search Spoofing Vulnerability (medium 5.4)
- [CVE-2024-30040](https://insights.sbomify.com/CVE-2024-30040/): Microsoft Windows MSHTML Platform Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2024-3004](https://insights.sbomify.com/CVE-2024-3004/): code-projects Online Book System Product.php cross site scripting (low 3.5)
- [CVE-2024-30039](https://insights.sbomify.com/CVE-2024-30039/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-30038](https://insights.sbomify.com/CVE-2024-30038/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30037](https://insights.sbomify.com/CVE-2024-30037/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2024-30036](https://insights.sbomify.com/CVE-2024-30036/): Windows Deployment Services Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-30035](https://insights.sbomify.com/CVE-2024-30035/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30034](https://insights.sbomify.com/CVE-2024-30034/): Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-30033](https://insights.sbomify.com/CVE-2024-30033/): Windows Search Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-30032](https://insights.sbomify.com/CVE-2024-30032/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30031](https://insights.sbomify.com/CVE-2024-30031/): Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30030](https://insights.sbomify.com/CVE-2024-30030/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-3003](https://insights.sbomify.com/CVE-2024-3003/): code-projects Online Book System cart.php sql injection (medium 6.3)
- [CVE-2024-30029](https://insights.sbomify.com/CVE-2024-30029/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30028](https://insights.sbomify.com/CVE-2024-30028/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30027](https://insights.sbomify.com/CVE-2024-30027/): NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30025](https://insights.sbomify.com/CVE-2024-30025/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30024](https://insights.sbomify.com/CVE-2024-30024/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30023](https://insights.sbomify.com/CVE-2024-30023/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30022](https://insights.sbomify.com/CVE-2024-30022/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30021](https://insights.sbomify.com/CVE-2024-30021/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30020](https://insights.sbomify.com/CVE-2024-30020/): Windows Cryptographic Services Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-3002](https://insights.sbomify.com/CVE-2024-3002/): code-projects Online Book System description.php sql injection (medium 6.3)
- [CVE-2024-30019](https://insights.sbomify.com/CVE-2024-30019/): DHCP Server Service Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-30018](https://insights.sbomify.com/CVE-2024-30018/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-30017](https://insights.sbomify.com/CVE-2024-30017/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30016](https://insights.sbomify.com/CVE-2024-30016/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-30015](https://insights.sbomify.com/CVE-2024-30015/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30014](https://insights.sbomify.com/CVE-2024-30014/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-30013](https://insights.sbomify.com/CVE-2024-30013/): Windows MultiPoint Services Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30012](https://insights.sbomify.com/CVE-2024-30012/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30011](https://insights.sbomify.com/CVE-2024-30011/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-30010](https://insights.sbomify.com/CVE-2024-30010/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-3001](https://insights.sbomify.com/CVE-2024-3001/): code-projects Online Book System Product.php sql injection (medium 6.3)
- [CVE-2024-30009](https://insights.sbomify.com/CVE-2024-30009/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30008](https://insights.sbomify.com/CVE-2024-30008/): Windows DWM Core Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-30007](https://insights.sbomify.com/CVE-2024-30007/): Microsoft Brokering File System Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-30006](https://insights.sbomify.com/CVE-2024-30006/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-30005](https://insights.sbomify.com/CVE-2024-30005/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30004](https://insights.sbomify.com/CVE-2024-30004/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30003](https://insights.sbomify.com/CVE-2024-30003/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30002](https://insights.sbomify.com/CVE-2024-30002/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30001](https://insights.sbomify.com/CVE-2024-30001/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-30000](https://insights.sbomify.com/CVE-2024-30000/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-3000](https://insights.sbomify.com/CVE-2024-3000/): code-projects Online Book System index.php sql injection (high 7.3)
- [CVE-2024-29999](https://insights.sbomify.com/CVE-2024-29999/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-29998](https://insights.sbomify.com/CVE-2024-29998/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-29997](https://insights.sbomify.com/CVE-2024-29997/): Windows Mobile Broadband Driver Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-29996](https://insights.sbomify.com/CVE-2024-29996/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-29995](https://insights.sbomify.com/CVE-2024-29995/): Windows Kerberos Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2024-29994](https://insights.sbomify.com/CVE-2024-29994/): Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-29993](https://insights.sbomify.com/CVE-2024-29993/): Azure CycleCloud Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-29992](https://insights.sbomify.com/CVE-2024-29992/): Azure Identity Library for .NET Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-29991](https://insights.sbomify.com/CVE-2024-29991/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 5.0)
- [CVE-2024-29990](https://insights.sbomify.com/CVE-2024-29990/): Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability (critical 9.0)
- [CVE-2024-2999](https://insights.sbomify.com/CVE-2024-2999/): Campcodes Online Art Gallery Management System adminHome.php sql injection (medium 6.3)
- [CVE-2024-29989](https://insights.sbomify.com/CVE-2024-29989/): Azure Monitor Agent Elevation of Privilege Vulnerability (high 8.4)
- [CVE-2024-29988](https://insights.sbomify.com/CVE-2024-29988/): Microsoft SmartScreen Prompt Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2024-29987](https://insights.sbomify.com/CVE-2024-29987/): Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-29986](https://insights.sbomify.com/CVE-2024-29986/): Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability (medium 5.4)
- [CVE-2024-29985](https://insights.sbomify.com/CVE-2024-29985/): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-29984](https://insights.sbomify.com/CVE-2024-29984/): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-29983](https://insights.sbomify.com/CVE-2024-29983/): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-29982](https://insights.sbomify.com/CVE-2024-29982/): Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-29981](https://insights.sbomify.com/CVE-2024-29981/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2024-29980](https://insights.sbomify.com/CVE-2024-29980/): Unsafe Handling of IHV UEFI Variables (medium 4.6)
- [CVE-2024-2998](https://insights.sbomify.com/CVE-2024-2998/): Bdtask Multi-Store Inventory Management System Store Update Page cross site scripting (low 2.4)
- [CVE-2024-29979](https://insights.sbomify.com/CVE-2024-29979/): Unsafe Handling of Phoenix UEFI Variables (medium 4.6)
- [CVE-2024-29978](https://insights.sbomify.com/CVE-2024-29978/): Information disclosure in Multiple MFPs (multifunction printers) (medium 5.9)
- [CVE-2024-29977](https://insights.sbomify.com/CVE-2024-29977/): Malicious remote can create arbitrary reactions on arbitrary posts (low 2.7)
- [CVE-2024-29976](https://insights.sbomify.com/CVE-2024-29976/): Privilege escalation in NAS326 firmware (medium 6.5)
- [CVE-2024-29975](https://insights.sbomify.com/CVE-2024-29975/): Privilege escalation in NAS326 firmware (medium 6.7)
- [CVE-2024-29974](https://insights.sbomify.com/CVE-2024-29974/): File upload in NAS326 firmware (critical 9.8)
- [CVE-2024-29973](https://insights.sbomify.com/CVE-2024-29973/): Command injection in NAS326 firmware (critical 9.8)
- [CVE-2024-29972](https://insights.sbomify.com/CVE-2024-29972/): Command injection in NAS326 firmware (critical 9.8)
- [CVE-2024-29971](https://insights.sbomify.com/CVE-2024-29971/): Other in scontain:scone (critical 9.8)
- [CVE-2024-29970](https://insights.sbomify.com/CVE-2024-29970/): Fortanix Enclave OS 3.36.1941-EM has an interface vulnerability that leads to state corruption via injected signals. (critical 9.8)
- [CVE-2024-2997](https://insights.sbomify.com/CVE-2024-2997/): Bdtask Multi-Store Inventory Management System cross site scripting (low 2.4)
- [CVE-2024-29969](https://insights.sbomify.com/CVE-2024-29969/): TLS/SSL weak message authentication code ciphers are added by default for port 18082 (high 7.5)
- [CVE-2024-29968](https://insights.sbomify.com/CVE-2024-29968/): SQL Table names, column names, and SQL queries are collected in DR standby Supportsave (high 7.7)
- [CVE-2024-29967](https://insights.sbomify.com/CVE-2024-29967/): Misconfiguration in Brocade SANnav (medium 4.4)
- [CVE-2024-29966](https://insights.sbomify.com/CVE-2024-29966/): hard-coded credentials in the documentation that appear as the appliance root password (high 7.5)
- [CVE-2024-29965](https://insights.sbomify.com/CVE-2024-29965/): Insecure backup (medium 6.8)
- [CVE-2024-29964](https://insights.sbomify.com/CVE-2024-29964/): Brocade SANnav versions before v2.3.0a do not correctly set permissions on files, including docker files (medium 5.7)
- [CVE-2024-29963](https://insights.sbomify.com/CVE-2024-29963/): Brocade SANnav contains hardcoded TLS keys used by Docker (low 1.9)
- [CVE-2024-29962](https://insights.sbomify.com/CVE-2024-29962/): Insecure file permission setting that makes files world-readable (medium 5.5)
- [CVE-2024-29961](https://insights.sbomify.com/CVE-2024-29961/): supply-chain attack risk (high 8.2)
- [CVE-2024-29960](https://insights.sbomify.com/CVE-2024-29960/): Identical SSH keys utilized inside the OVA image (CVE-2024-29960) (medium 6.8)
- [CVE-2024-2996](https://insights.sbomify.com/CVE-2024-2996/): Bdtask Multi-Store Inventory Management System Page Title cross site scripting (low 2.4)
- [CVE-2024-29959](https://insights.sbomify.com/CVE-2024-29959/): Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save (high 8.6)
- [CVE-2024-29958](https://insights.sbomify.com/CVE-2024-29958/): Information disclosure in Brocade SANnav (high 7.5)
- [CVE-2024-29957](https://insights.sbomify.com/CVE-2024-29957/): Encryption key is stored in the DR log files (high 7.5)
- [CVE-2024-29956](https://insights.sbomify.com/CVE-2024-29956/): cleartext password in supportsave logs when a user schedules a switch Supportsave from Brocade SANnav (medium 6.5)
- [CVE-2024-29955](https://insights.sbomify.com/CVE-2024-29955/): Insertion of Sensitive Information into Brocade SANnav Log File (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/388/