# Vulnerabilities published in 2024


- [CVE-2024-2842](https://insights.sbomify.com/CVE-2024-2842/): Easy Appointments <= 3.11.18 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-28418](https://insights.sbomify.com/CVE-2024-28418/): File upload in webedition:webedition cms (medium 6.5)
- [CVE-2024-28417](https://insights.sbomify.com/CVE-2024-28417/): Cross-site scripting in webedition:webedition cms (medium 6.3)
- [CVE-2024-2841](https://insights.sbomify.com/CVE-2024-2841/): Cross-site scripting in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE (medium 6.4)
- [CVE-2024-28405](https://insights.sbomify.com/CVE-2024-28405/): Auth bypass in sem-cms:semcms (high 7.2)
- [CVE-2024-28404](https://insights.sbomify.com/CVE-2024-28404/): Cross-site scripting in totolink:x2000r firmware (high 8.0)
- [CVE-2024-28403](https://insights.sbomify.com/CVE-2024-28403/): Cross-site scripting in totolink:x2000r firmware (medium 5.4)
- [CVE-2024-28402](https://insights.sbomify.com/CVE-2024-28402/): Cross-site scripting in totolink:x2000r firmware (medium 5.9)
- [CVE-2024-28401](https://insights.sbomify.com/CVE-2024-28401/): Cross-site scripting in totolink:x2000r firmware (medium 5.4)
- [CVE-2024-2840](https://insights.sbomify.com/CVE-2024-2840/): Enhanced Media Library <= 2.8.9 - Authenticated (Author+) Stored Cross-Site Scripting (medium 5.4)
- [CVE-2024-28397](https://insights.sbomify.com/CVE-2024-28397/): js2py allows remote code execution (medium 5.3)
- [CVE-2024-28396](https://insights.sbomify.com/CVE-2024-28396/): Code injection in myprestamodules:orders \(csv\, excel\) export pro (high 7.5)
- [CVE-2024-28395](https://insights.sbomify.com/CVE-2024-28395/): SQL injection in best-kit:bestkit popup (critical 9.8)
- [CVE-2024-28394](https://insights.sbomify.com/CVE-2024-28394/): An issue in Advanced Plugins reportsstatistics v1.3.20 and before allows a remote attacker to execute arbitrary code via the Sales Reports, (critical 9.8)
- [CVE-2024-28393](https://insights.sbomify.com/CVE-2024-28393/): SQL injection in scalapay:scalapay (critical 9.8)
- [CVE-2024-28392](https://insights.sbomify.com/CVE-2024-28392/): SQL injection in prestashop:abandoned cart reminder pro (critical 9.8)
- [CVE-2024-28391](https://insights.sbomify.com/CVE-2024-28391/): SQL injection in fmemodules:b2b quick order form (critical 9.8)
- [CVE-2024-28390](https://insights.sbomify.com/CVE-2024-28390/): Missing authorization in advancedplugins:ultimateimagetool (critical 9.8)
- [CVE-2024-2839](https://insights.sbomify.com/CVE-2024-2839/): Colibri Page Builder <= 1.0.263 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-28389](https://insights.sbomify.com/CVE-2024-28389/): SQL injection vulnerability in KnowBand spinwheel v.3.0.3 and before allows a remote attacker to gain escalated privileges and obtain sensit (critical 9.8)
- [CVE-2024-28388](https://insights.sbomify.com/CVE-2024-28388/): SQL injection in sunnytoo:product comments (critical 9.8)
- [CVE-2024-28387](https://insights.sbomify.com/CVE-2024-28387/): Information disclosure in axonaut:axonaut (high 7.5)
- [CVE-2024-28386](https://insights.sbomify.com/CVE-2024-28386/): Code injection in home-made:fastmag sync (critical 9.8)
- [CVE-2024-28383](https://insights.sbomify.com/CVE-2024-28383/): Memory corruption in tenda:ax12 firmware (critical 9.8)
- [CVE-2024-2838](https://insights.sbomify.com/CVE-2024-2838/): WPC Composite Products for WooCommerce <= 7.2.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-2837](https://insights.sbomify.com/CVE-2024-2837/): WP Chat App < 3.6.4 - Admin+ Stored XSS (medium 5.4)
- [CVE-2024-2836](https://insights.sbomify.com/CVE-2024-2836/): Super Socializer < 7.13.64 - Editor+ Stored XSS (medium 4.8)
- [CVE-2024-28354](https://insights.sbomify.com/CVE-2024-28354/): Command injection in trendnet:tew-827dru firmware (critical 10.0)
- [CVE-2024-28353](https://insights.sbomify.com/CVE-2024-28353/): Command injection in trendnet:tew-827dru firmware (high 8.8)
- [CVE-2024-2835](https://insights.sbomify.com/CVE-2024-2835/): OpenText ArcSight Enterprise Security Manager and ArcSight Platform Stored XSS (high 8.7)
- [CVE-2024-28345](https://insights.sbomify.com/CVE-2024-28345/): Missing authorization in sipwise:next generation communication platform (medium 5.5)
- [CVE-2024-28344](https://insights.sbomify.com/CVE-2024-28344/): Open redirect in sipwise:next generation communication platform (low 3.1)
- [CVE-2024-28340](https://insights.sbomify.com/CVE-2024-28340/): Information disclosure in netgear:cbk40 firmware (high 7.5)
- [CVE-2024-2834](https://insights.sbomify.com/CVE-2024-2834/): OpenText ArcSight Management Center and ArcSight Platform Stored XSS (high 8.7)
- [CVE-2024-28339](https://insights.sbomify.com/CVE-2024-28339/): Information disclosure in netgear:cbk40 firmware (medium 5.4)
- [CVE-2024-28338](https://insights.sbomify.com/CVE-2024-28338/): Auth bypass in totolink:a8000ru firmware (high 8.0)
- [CVE-2024-28335](https://insights.sbomify.com/CVE-2024-28335/): Lektor does not sanitize database path traversal (critical 9.1)
- [CVE-2024-2833](https://insights.sbomify.com/CVE-2024-2833/): Jobs for WordPress <= 2.7.5 - Reflected Cross-Site Scripting via job-search (medium 6.1)
- [CVE-2024-28328](https://insights.sbomify.com/CVE-2024-28328/): CSV Injection vulnerability in the Asus RT-N12+ router allows administrator users to inject arbitrary commands or formulas in the client nam (medium 5.4)
- [CVE-2024-28327](https://insights.sbomify.com/CVE-2024-28327/): Asus RT-N12+ B1 router stores user passwords in plaintext, which could allow local attackers to obtain unauthorized access and modify router settings. (high 8.4)
- [CVE-2024-28326](https://insights.sbomify.com/CVE-2024-28326/): Incorrect Access Control in ASUS RT-N12+ B1 and RT-N12 D1 routers allows local attackers to obtain root terminal access via the the UART interface. (medium 6.8)
- [CVE-2024-28325](https://insights.sbomify.com/CVE-2024-28325/): Asus RT-N12+ B1 router stores credentials in cleartext, which could allow local attackers to obtain unauthorized access and modify router settings. (medium 6.1)
- [CVE-2024-28323](https://insights.sbomify.com/CVE-2024-28323/): SQL injection in phpgurukul:user registration \& login and user management system (medium 6.5)
- [CVE-2024-28322](https://insights.sbomify.com/CVE-2024-28322/): SQL injection in puneethreddyhc:event management (critical 9.8)
- [CVE-2024-28320](https://insights.sbomify.com/CVE-2024-28320/): Missing authorization in mayurik:hospital management system (high 7.6)
- [CVE-2024-2832](https://insights.sbomify.com/CVE-2024-2832/): Campcodes Online Shopping System offersmail.php cross site scripting (low 3.5)
- [CVE-2024-28319](https://insights.sbomify.com/CVE-2024-28319/): Memory corruption in gpac:gpac (medium 6.2)
- [CVE-2024-28318](https://insights.sbomify.com/CVE-2024-28318/): Memory corruption in gpac:gpac (high 7.1)
- [CVE-2024-2831](https://insights.sbomify.com/CVE-2024-2831/): Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode (high 8.8)
- [CVE-2024-28303](https://insights.sbomify.com/CVE-2024-28303/): Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php. (critical 9.8)
- [CVE-2024-2830](https://insights.sbomify.com/CVE-2024-2830/): Cross-site scripting in Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI (medium 6.4)
- [CVE-2024-28298](https://insights.sbomify.com/CVE-2024-28298/): SQL injection in e-bmsoft:bmplanning (medium 6.0)
- [CVE-2024-28297](https://insights.sbomify.com/CVE-2024-28297/): SQL injection vulnerability in AzureSoft MyHorus 4.3.5 allows authenticated users to execute arbitrary SQL commands via unspecified vectors. (high 7.5)
- [CVE-2024-28294](https://insights.sbomify.com/CVE-2024-28294/): SQL injection in limbas:limbas (medium 6.5)
- [CVE-2024-2829](https://insights.sbomify.com/CVE-2024-2829/): Inefficient Regular Expression Complexity in GitLab (high 7.5)
- [CVE-2024-28288](https://insights.sbomify.com/CVE-2024-28288/): Auth bypass in ruijie:rg-nbr700gw firmware (critical 9.8)
- [CVE-2024-28287](https://insights.sbomify.com/CVE-2024-28287/): A DOM-based open redirection in the returnUrl parameter of INSTINCT UI Web Client 6.5.0 allows attackers to redirect users to malicious sites via a crafted URL. (high 7.3)
- [CVE-2024-28286](https://insights.sbomify.com/CVE-2024-28286/): Null dereference in mz-automation:libiec61850 (high 7.5)
- [CVE-2024-28285](https://insights.sbomify.com/CVE-2024-28285/): A Fault Injection vulnerability in the SymmetricDecrypt function in cryptopp/elgamal.h of Cryptopp Crypto++ 8.9, allows an attacker to co-re (critical 9.8)
- [CVE-2024-28283](https://insights.sbomify.com/CVE-2024-28283/): Memory corruption in linksys:e1000 firmware (medium 6.7)
- [CVE-2024-2828](https://insights.sbomify.com/CVE-2024-2828/): lakernote EasyAdmin IndexController.java thumbnail server-side request forgery (medium 6.3)
- [CVE-2024-28279](https://insights.sbomify.com/CVE-2024-28279/): SQL injection in carmelo:computer book store (high 7.3)
- [CVE-2024-28277](https://insights.sbomify.com/CVE-2024-28277/): Cross-site scripting in remyandrade:school task manager (medium 6.1)
- [CVE-2024-28276](https://insights.sbomify.com/CVE-2024-28276/): Cross-site scripting in rems:school task manager (medium 6.1)
- [CVE-2024-28275](https://insights.sbomify.com/CVE-2024-28275/): Puwell Cloud Tech Co, Ltd 360Eyes Pro v3.9.5.16(3090516) was discovered to transmit sensitive information in cleartext. (medium 6.5)
- [CVE-2024-28270](https://insights.sbomify.com/CVE-2024-28270/): An issue discovered in web-flash v3.0 allows attackers to reset passwords for arbitrary users via crafted POST request to /prod-api/user/resetPassword. (high 8.1)
- [CVE-2024-2827](https://insights.sbomify.com/CVE-2024-2827/): lakernote EasyAdmin saveReportFile server-side request forgery (medium 6.3)
- [CVE-2024-28269](https://insights.sbomify.com/CVE-2024-28269/): ReCrystallize Server 5.10.0.0 allows administrators to upload files to the server. (high 7.2)
- [CVE-2024-28265](https://insights.sbomify.com/CVE-2024-28265/): Path traversal in ibos:ibos (critical 9.1)
- [CVE-2024-2826](https://insights.sbomify.com/CVE-2024-2826/): lakernote EasyAdmin saveReportFile xml external entity reference (medium 6.3)
- [CVE-2024-28255](https://insights.sbomify.com/CVE-2024-28255/): Authentication Bypass in OpenMetadata (critical 9.8)
- [CVE-2024-28254](https://insights.sbomify.com/CVE-2024-28254/): SpEL Injection in `GET /api/v1/events/subscriptions/validation/condition/<expr>` in OpenMetadata (high 8.8)
- [CVE-2024-28253](https://insights.sbomify.com/CVE-2024-28253/): SpEL Injection in `PUT /api/v1/policies` in OpenMetadata (critical 9.4)
- [CVE-2024-28252](https://insights.sbomify.com/CVE-2024-28252/): CoreWCF NetFraming based services can leave connections open when they should be closed (high 7.5)
- [CVE-2024-28251](https://insights.sbomify.com/CVE-2024-28251/): Cross-site websocket hijacking in Querybook (medium 5.6)
- [CVE-2024-28250](https://insights.sbomify.com/CVE-2024-28250/): Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies (medium 6.1)
- [CVE-2024-2825](https://insights.sbomify.com/CVE-2024-2825/): lakernote EasyAdmin saveReportFile path traversal (medium 6.3)
- [CVE-2024-28249](https://insights.sbomify.com/CVE-2024-28249/): Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies (medium 6.1)
- [CVE-2024-28248](https://insights.sbomify.com/CVE-2024-28248/): Cilium intermittent HTTP policy bypass (high 7.2)
- [CVE-2024-28247](https://insights.sbomify.com/CVE-2024-28247/): Pihole Authenticated Arbitrary File Read with root privileges (high 7.6)
- [CVE-2024-28246](https://insights.sbomify.com/CVE-2024-28246/): KaTeX is missing normalization of the protocol in URLs allows bypassing forbidden protocols (medium 5.5)
- [CVE-2024-28245](https://insights.sbomify.com/CVE-2024-28245/): KaTeX's \includegraphics does not escape filename (medium 6.3)
- [CVE-2024-28244](https://insights.sbomify.com/CVE-2024-28244/): KaTeX's maxExpand bypassed by Unicode sub/superscripts (medium 6.5)
- [CVE-2024-28243](https://insights.sbomify.com/CVE-2024-28243/): KaTeX's maxExpand bypassed by \edef (medium 6.5)
- [CVE-2024-28242](https://insights.sbomify.com/CVE-2024-28242/): Disclosure of the existence of secret categories with custom backgrounds in Discourse (medium 5.3)
- [CVE-2024-28241](https://insights.sbomify.com/CVE-2024-28241/): GlPI-Agent MSI package installation doesn't update folder security profile when using non default installation folder (high 7.3)
- [CVE-2024-28240](https://insights.sbomify.com/CVE-2024-28240/): GLPI-Agent's MSI package installation permits local users to change Agent configuration (high 7.3)
- [CVE-2024-2824](https://insights.sbomify.com/CVE-2024-2824/): Matthias-Wandel jhead exif.c PrintFormatNumber heap-based overflow (medium 6.3)
- [CVE-2024-28239](https://insights.sbomify.com/CVE-2024-28239/): URL Redirection to Untrusted Site in OAuth2/OpenID in directus (medium 5.4)
- [CVE-2024-28238](https://insights.sbomify.com/CVE-2024-28238/): Session Token in URL in directus (low 2.3)
- [CVE-2024-28237](https://insights.sbomify.com/CVE-2024-28237/): OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings (medium 4.0)
- [CVE-2024-28236](https://insights.sbomify.com/CVE-2024-28236/): Insecure Variable Substitution in Vela (high 7.7)
- [CVE-2024-28235](https://insights.sbomify.com/CVE-2024-28235/): Contao possible cookie sharing with external domains while checking protected pages for broken links (high 8.4)
- [CVE-2024-28234](https://insights.sbomify.com/CVE-2024-28234/): Contao has insufficient BBCode sanitizer (medium 4.3)
- [CVE-2024-28233](https://insights.sbomify.com/CVE-2024-28233/): XSS in JupyterHub via Self-XSS leveraged by Cookie Tossing (high 8.1)
- [CVE-2024-28232](https://insights.sbomify.com/CVE-2024-28232/): Username Enumeration in CasaOS via bypass of CVE-2024-24766 (medium 6.2)
- [CVE-2024-28231](https://insights.sbomify.com/CVE-2024-28231/): Manipulated DATA Submessage causes a heap-buffer-overflow error (critical 9.7)
- [CVE-2024-28230](https://insights.sbomify.com/CVE-2024-28230/): Missing authorization in YouTrack (medium 6.5)
- [CVE-2024-2823](https://insights.sbomify.com/CVE-2024-2823/): DedeCMS mda_main.php cross-site request forgery (medium 4.3)
- [CVE-2024-28229](https://insights.sbomify.com/CVE-2024-28229/): Missing authorization in YouTrack (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/399/