# Vulnerabilities published in 2024


- [CVE-2024-28228](https://insights.sbomify.com/CVE-2024-28228/): Auth bypass in YouTrack (medium 5.3)
- [CVE-2024-28226](https://insights.sbomify.com/CVE-2024-28226/): Fs has an improper input validation vulnerability (high 8.1)
- [CVE-2024-28224](https://insights.sbomify.com/CVE-2024-28224/): Ollama DNS rebinding vulnerability (medium 6.6)
- [CVE-2024-28222](https://insights.sbomify.com/CVE-2024-28222/): Path traversal in veritas:netbackup (critical 9.8)
- [CVE-2024-2822](https://insights.sbomify.com/CVE-2024-2822/): DedeCMS vote_edit.php cross-site request forgery (medium 4.3)
- [CVE-2024-28219](https://insights.sbomify.com/CVE-2024-28219/): Pillow buffer overflow vulnerability (medium 6.7)
- [CVE-2024-28216](https://insights.sbomify.com/CVE-2024-28216/): Missing authorization in nGrinder (medium 5.4)
- [CVE-2024-28215](https://insights.sbomify.com/CVE-2024-28215/): Missing authorization in nGrinder (high 7.5)
- [CVE-2024-28214](https://insights.sbomify.com/CVE-2024-28214/): Denial of service in nGrinder (low 2.7)
- [CVE-2024-28213](https://insights.sbomify.com/CVE-2024-28213/): nGrinder vulnerable to unsafe Java objects deserialization (critical 9.8)
- [CVE-2024-28212](https://insights.sbomify.com/CVE-2024-28212/): Deserialization in nGrinder (critical 9.8)
- [CVE-2024-28211](https://insights.sbomify.com/CVE-2024-28211/): Deserialization in nGrinder (critical 9.8)
- [CVE-2024-2821](https://insights.sbomify.com/CVE-2024-2821/): DedeCMS friendlink_edit.php cross-site request forgery (medium 4.3)
- [CVE-2024-28200](https://insights.sbomify.com/CVE-2024-28200/): N-central Authentication Bypass (critical 9.1)
- [CVE-2024-2820](https://insights.sbomify.com/CVE-2024-2820/): DedeCMS baidunews.php cross-site request forgery (medium 4.3)
- [CVE-2024-28199](https://insights.sbomify.com/CVE-2024-28199/): Cross-site Scripting (XSS) possible with maliciously formed HTML attribute names and values in Phlex (high 7.1)
- [CVE-2024-28198](https://insights.sbomify.com/CVE-2024-28198/): XML external entity (XXE) injection in OpenOLAT (medium 4.6)
- [CVE-2024-28197](https://insights.sbomify.com/CVE-2024-28197/): Account Takeover via Session Fixation in Zitadel [Bypassing MFA] (high 7.5)
- [CVE-2024-28196](https://insights.sbomify.com/CVE-2024-28196/): Clickjacking in your_spotify (medium 6.5)
- [CVE-2024-28195](https://insights.sbomify.com/CVE-2024-28195/): Cross-Site Request Forgery (CSRF) vulnerability in API and login in your_spotify (high 8.1)
- [CVE-2024-28194](https://insights.sbomify.com/CVE-2024-28194/): Authentication Bypass Because of Hardcoded JWT Secret in your_spotify (critical 9.1)
- [CVE-2024-28193](https://insights.sbomify.com/CVE-2024-28193/): Disclosure of Spotify API Access Tokens to Guest Users Using Public Tokens in your_spotify (medium 6.5)
- [CVE-2024-28192](https://insights.sbomify.com/CVE-2024-28192/): NoSQL Injection Leading to Authentication Bypass in your_spotify (medium 5.3)
- [CVE-2024-28191](https://insights.sbomify.com/CVE-2024-28191/): Contao may have unencoded insert tags in the frontend (low 3.1)
- [CVE-2024-28190](https://insights.sbomify.com/CVE-2024-28190/): Contao core bundle vulnerable to cross site scripting in the file manager (medium 5.4)
- [CVE-2024-2819](https://insights.sbomify.com/CVE-2024-2819/): File Permission Vulnerability in Hitachi Ops Center Common Services (medium 5.1)
- [CVE-2024-28189](https://insights.sbomify.com/CVE-2024-28189/): Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic Link (critical 10.0)
- [CVE-2024-28188](https://insights.sbomify.com/CVE-2024-28188/): jupyter-scheduler's endpoint is missing authentication (medium 5.3)
- [CVE-2024-28187](https://insights.sbomify.com/CVE-2024-28187/): OS Command Injection Vulnerability in SOY CMS (high 7.2)
- [CVE-2024-28186](https://insights.sbomify.com/CVE-2024-28186/): SMTP Mail Credentials Disclosed in Error Log in freescout (high 7.1)
- [CVE-2024-28185](https://insights.sbomify.com/CVE-2024-28185/): Judge0 vulnerable to Sandbox Escape via Symbolic Link (critical 10.0)
- [CVE-2024-28184](https://insights.sbomify.com/CVE-2024-28184/): WeasyPrint allows the attachment of arbitrary files and URLs to a PDF (high 7.4)
- [CVE-2024-28183](https://insights.sbomify.com/CVE-2024-28183/): Anti Rollback bypass with physical access and TOCTOU attack (medium 6.1)
- [CVE-2024-28182](https://insights.sbomify.com/CVE-2024-28182/): Reading unbounded number of HTTP/2 CONTINUATION frames to cause excessive CPU usage (medium 5.3)
- [CVE-2024-28181](https://insights.sbomify.com/CVE-2024-28181/): Arbitrary method invocation turbo_boost-commands (high 8.1)
- [CVE-2024-28180](https://insights.sbomify.com/CVE-2024-28180/): Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification) (medium 4.3)
- [CVE-2024-2818](https://insights.sbomify.com/CVE-2024-2818/): Allocation of Resources Without Limits or Throttling in GitLab (medium 4.3)
- [CVE-2024-28179](https://insights.sbomify.com/CVE-2024-28179/): Jupyter Server Proxy's Websocket Proxying does not require authentication (critical 9.1)
- [CVE-2024-28176](https://insights.sbomify.com/CVE-2024-28176/): jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext (medium 4.9)
- [CVE-2024-28175](https://insights.sbomify.com/CVE-2024-28175/): Cross-site scripting on application summary component in argo-cd (critical 9.1)
- [CVE-2024-28174](https://insights.sbomify.com/CVE-2024-28174/): Missing authorization in TeamCity (medium 5.8)
- [CVE-2024-28173](https://insights.sbomify.com/CVE-2024-28173/): Information disclosure in TeamCity (medium 4.3)
- [CVE-2024-28172](https://insights.sbomify.com/CVE-2024-28172/): Privilege escalation in Intel(R) Trace Analyzer and Collector software (medium 5.4)
- [CVE-2024-28171](https://insights.sbomify.com/CVE-2024-28171/): Delta Electronics DIAEnergie Path traversal (high 8.1)
- [CVE-2024-28170](https://insights.sbomify.com/CVE-2024-28170/): Missing authorization in Intel(R) RAID Web Console (low 3.3)
- [CVE-2024-2817](https://insights.sbomify.com/CVE-2024-2817/): Tenda AC15 SysToolRestoreSet fromSysToolRestoreSet cross-site request forgery (medium 4.3)
- [CVE-2024-28169](https://insights.sbomify.com/CVE-2024-28169/): Information disclosure in BigDL software maintained by Intel(R) (medium 4.3)
- [CVE-2024-28168](https://insights.sbomify.com/CVE-2024-28168/): Apache XML Graphics FOP: XML External Entity (XXE) Processing (high 7.5)
- [CVE-2024-28167](https://insights.sbomify.com/CVE-2024-28167/): Missing Authorization check in SAP Group Reporting Data Collection (Enter Package Data) (medium 6.5)
- [CVE-2024-28166](https://insights.sbomify.com/CVE-2024-28166/): Multiple Unrestricted File Upload vulnerabilities in SAP BusinessObjects Business Intelligence Platform (low 3.7)
- [CVE-2024-28165](https://insights.sbomify.com/CVE-2024-28165/): Cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform (high 8.1)
- [CVE-2024-28164](https://insights.sbomify.com/CVE-2024-28164/): Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) (medium 5.3)
- [CVE-2024-28163](https://insights.sbomify.com/CVE-2024-28163/): Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages) (medium 5.3)
- [CVE-2024-28162](https://insights.sbomify.com/CVE-2024-28162/): Jenkins Delphix Plugin has improper SSL/TLS certificate validation (medium 4.2)
- [CVE-2024-28161](https://insights.sbomify.com/CVE-2024-28161/): Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default (medium 5.3)
- [CVE-2024-28160](https://insights.sbomify.com/CVE-2024-28160/): Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting (high 8.8)
- [CVE-2024-2816](https://insights.sbomify.com/CVE-2024-2816/): Tenda AC15 SysToolReboot fromSysToolReboot cross-site request forgery (medium 4.3)
- [CVE-2024-28159](https://insights.sbomify.com/CVE-2024-28159/): Jenkins Subversion Partial Release Manager Plugin missing permission check (medium 4.3)
- [CVE-2024-28158](https://insights.sbomify.com/CVE-2024-28158/): Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery (medium 4.3)
- [CVE-2024-28157](https://insights.sbomify.com/CVE-2024-28157/): Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting (high 8.0)
- [CVE-2024-28156](https://insights.sbomify.com/CVE-2024-28156/): Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting (medium 5.4)
- [CVE-2024-28155](https://insights.sbomify.com/CVE-2024-28155/): Jenkins AppSpider Plugin missing permission checks (medium 4.3)
- [CVE-2024-28154](https://insights.sbomify.com/CVE-2024-28154/): Jenkins MQ Notifier Plugin exposes sensitive information in build logs (medium 6.5)
- [CVE-2024-28153](https://insights.sbomify.com/CVE-2024-28153/): Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability (high 7.3)
- [CVE-2024-28152](https://insights.sbomify.com/CVE-2024-28152/): Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests (medium 6.3)
- [CVE-2024-28151](https://insights.sbomify.com/CVE-2024-28151/): Jenkins HTML Publisher Plugin Path traversal vulnerability (medium 4.3)
- [CVE-2024-28150](https://insights.sbomify.com/CVE-2024-28150/): Jenkins HTML Publisher Plugin Stored XSS vulnerability (medium 4.7)
- [CVE-2024-2815](https://insights.sbomify.com/CVE-2024-2815/): Tenda AC15 Cookie execCommand R7WebsSecurityHandler stack-based overflow (high 8.8)
- [CVE-2024-28149](https://insights.sbomify.com/CVE-2024-28149/): Jenkins HTML Publisher Plugin does not properly sanitize input (medium 6.5)
- [CVE-2024-28148](https://insights.sbomify.com/CVE-2024-28148/): Apache Superset: Incorrect datasource authorization on explore REST API (medium 4.3)
- [CVE-2024-28147](https://insights.sbomify.com/CVE-2024-28147/): Unrestricted Upload of Files in edu-sharing (high 7.4)
- [CVE-2024-28146](https://insights.sbomify.com/CVE-2024-28146/): Hardcoded credentials (high 8.4)
- [CVE-2024-28145](https://insights.sbomify.com/CVE-2024-28145/): Unauthenticated SQL Injection (medium 5.9)
- [CVE-2024-28144](https://insights.sbomify.com/CVE-2024-28144/): Broken Access Control (medium 5.5)
- [CVE-2024-28143](https://insights.sbomify.com/CVE-2024-28143/): Insecure Password Change Function (high 8.4)
- [CVE-2024-28142](https://insights.sbomify.com/CVE-2024-28142/): Stored cross site scripting (medium 4.7)
- [CVE-2024-28141](https://insights.sbomify.com/CVE-2024-28141/): Cross-Site Request-Forgery (medium 6.3)
- [CVE-2024-28140](https://insights.sbomify.com/CVE-2024-28140/): Violation of Least Privilege Principle (medium 6.1)
- [CVE-2024-2814](https://insights.sbomify.com/CVE-2024-2814/): Tenda AC15 DhcpListClient fromDhcpListClient stack-based overflow (high 8.8)
- [CVE-2024-28139](https://insights.sbomify.com/CVE-2024-28139/): Privilege escalation through sudo misconfiguration (high 8.8)
- [CVE-2024-28138](https://insights.sbomify.com/CVE-2024-28138/): OS Command Injection (high 7.3)
- [CVE-2024-28137](https://insights.sbomify.com/CVE-2024-28137/): PHOENIX CONTACT: privilege escalation due to a TOCTOU vulnerability in the CHARX Series (high 7.8)
- [CVE-2024-28136](https://insights.sbomify.com/CVE-2024-28136/): PHOENIX CONTACT: command injection gains root privileges using the OCPP remote service (high 7.8)
- [CVE-2024-28135](https://insights.sbomify.com/CVE-2024-28135/): PHOENIX CONTACT: command injection vulnerability in the API of the CHARX Series (medium 5.0)
- [CVE-2024-28134](https://insights.sbomify.com/CVE-2024-28134/): PHOENIX CONTACT: MitM attack gains privileges of the current logged in user in CHARX Series (high 7.0)
- [CVE-2024-28133](https://insights.sbomify.com/CVE-2024-28133/): PHOENIX CONTACT: Privilege escalation in CHARX Series (high 7.8)
- [CVE-2024-28132](https://insights.sbomify.com/CVE-2024-28132/): BIG-IP NEXT CNF vulnerability (medium 4.4)
- [CVE-2024-28131](https://insights.sbomify.com/CVE-2024-28131/): Code injection in EasyRange (high 7.8)
- [CVE-2024-28130](https://insights.sbomify.com/CVE-2024-28130/): Memory corruption in DCMTK (high 7.5)
- [CVE-2024-2813](https://insights.sbomify.com/CVE-2024-2813/): Tenda AC15 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow (high 8.8)
- [CVE-2024-28128](https://insights.sbomify.com/CVE-2024-28128/): FitNesse Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2024-28127](https://insights.sbomify.com/CVE-2024-28127/): Privilege escalation in Intel(R) Processors (high 8.7)
- [CVE-2024-28126](https://insights.sbomify.com/CVE-2024-28126/): Cross-site scripting in 0ch BBS Script (medium 6.1)
- [CVE-2024-28125](https://insights.sbomify.com/CVE-2024-28125/): FitNesse allows execution of arbitrary OS commands (critical 9.8)
- [CVE-2024-28123](https://insights.sbomify.com/CVE-2024-28123/): Wasmi Out-of-bounds Write for host to Wasm calls with more than 128 Parameters (high 7.3)
- [CVE-2024-28122](https://insights.sbomify.com/CVE-2024-28122/): JWX vulnerable to a denial of service attack using compressed JWE message (medium 6.8)
- [CVE-2024-28121](https://insights.sbomify.com/CVE-2024-28121/): Reflex arbitrary method call in stimulus_reflex (high 8.8)
- [CVE-2024-28120](https://insights.sbomify.com/CVE-2024-28120/): API key leak in codeium-chrome (medium 6.5)
- [CVE-2024-2812](https://insights.sbomify.com/CVE-2024-2812/): Tenda AC15 WriteFacMac formWriteFacMac os command injection (medium 6.3)
- [CVE-2024-28119](https://insights.sbomify.com/CVE-2024-28119/): Grav vulnerable to Server Side Template Injection (SSTI) via Twig escape handler (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/400/