# Vulnerabilities published in 2024


- [CVE-2024-27912](https://insights.sbomify.com/CVE-2024-27912/): Denial of service in Printers (high 7.5)
- [CVE-2024-27911](https://insights.sbomify.com/CVE-2024-27911/): Missing authorization in Printers (high 7.5)
- [CVE-2024-27910](https://insights.sbomify.com/CVE-2024-27910/): Missing authorization in Printers (medium 5.3)
- [CVE-2024-2791](https://insights.sbomify.com/CVE-2024-2791/): Metform Elementor Contact Form Builder <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widgets (medium 6.4)
- [CVE-2024-27909](https://insights.sbomify.com/CVE-2024-27909/): Denial of service in Printers (medium 4.9)
- [CVE-2024-27908](https://insights.sbomify.com/CVE-2024-27908/): Memory corruption in Printers (medium 4.9)
- [CVE-2024-27907](https://insights.sbomify.com/CVE-2024-27907/): Memory corruption in Simcenter Femap (high 7.8)
- [CVE-2024-27906](https://insights.sbomify.com/CVE-2024-27906/): Apache Airflow: Dag Code and Import Error Permissions Ignored (medium 5.9)
- [CVE-2024-27905](https://insights.sbomify.com/CVE-2024-27905/): Apache Aurora: padding oracle can allow construction an authentication cookie (critical 9.1)
- [CVE-2024-27903](https://insights.sbomify.com/CVE-2024-27903/): Privilege escalation in OpenVPN 2 (high 7.2)
- [CVE-2024-27902](https://insights.sbomify.com/CVE-2024-27902/): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP applications based on SAPGUI for HTML (WebGUI) (medium 5.4)
- [CVE-2024-27901](https://insights.sbomify.com/CVE-2024-27901/): Directory Traversal vulnerability in SAP Asset Accounting (high 7.2)
- [CVE-2024-27900](https://insights.sbomify.com/CVE-2024-27900/): Missing Authorization check in SAP ABAP Platform (medium 4.3)
- [CVE-2024-2790](https://insights.sbomify.com/CVE-2024-2790/): Cross-site scripting in HT Mega Addons for Elementor – Elementor Widgets & Template Builder (medium 6.4)
- [CVE-2024-27899](https://insights.sbomify.com/CVE-2024-27899/): Security misconfiguration vulnerability in SAP NetWeaver AS Java User Management Engine (high 8.8)
- [CVE-2024-27898](https://insights.sbomify.com/CVE-2024-27898/): Server-Side Request Forgery in SAP NetWeaver (medium 5.3)
- [CVE-2024-27897](https://insights.sbomify.com/CVE-2024-27897/): Information disclosure in EMUI (high 7.5)
- [CVE-2024-27896](https://insights.sbomify.com/CVE-2024-27896/): Other in EMUI (high 7.5)
- [CVE-2024-27895](https://insights.sbomify.com/CVE-2024-27895/): Missing authorization in HarmonyOS (high 7.5)
- [CVE-2024-27894](https://insights.sbomify.com/CVE-2024-27894/): Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying (high 8.5)
- [CVE-2024-27892](https://insights.sbomify.com/CVE-2024-27892/): Missing authorization in EOS (high 7.2)
- [CVE-2024-27891](https://insights.sbomify.com/CVE-2024-27891/): Security feature bypass in EOS (medium 6.9)
- [CVE-2024-27890](https://insights.sbomify.com/CVE-2024-27890/): Missing authorization in EOS (high 7.2)
- [CVE-2024-2789](https://insights.sbomify.com/CVE-2024-2789/): Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Calendy (medium 6.4)
- [CVE-2024-27889](https://insights.sbomify.com/CVE-2024-27889/): SQL injection in Arista Edge Threat Management - Arista NG Firewall (NGFW) (high 8.8)
- [CVE-2024-27888](https://insights.sbomify.com/CVE-2024-27888/): Privilege escalation in macOS (high 7.1)
- [CVE-2024-27887](https://insights.sbomify.com/CVE-2024-27887/): Path traversal in macOS (medium 6.2)
- [CVE-2024-27886](https://insights.sbomify.com/CVE-2024-27886/): Business logic in macOS (high 7.5)
- [CVE-2024-27885](https://insights.sbomify.com/CVE-2024-27885/): Path traversal in macOS (medium 6.3)
- [CVE-2024-27884](https://insights.sbomify.com/CVE-2024-27884/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-27883](https://insights.sbomify.com/CVE-2024-27883/): Misconfiguration in macOS (medium 4.4)
- [CVE-2024-27882](https://insights.sbomify.com/CVE-2024-27882/): Security feature bypass in macOS (medium 4.4)
- [CVE-2024-27881](https://insights.sbomify.com/CVE-2024-27881/): Information disclosure in macOS (medium 5.3)
- [CVE-2024-27880](https://insights.sbomify.com/CVE-2024-27880/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2024-2788](https://insights.sbomify.com/CVE-2024-2788/): Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title HTML Tag (medium 6.4)
- [CVE-2024-27879](https://insights.sbomify.com/CVE-2024-27879/): Memory corruption in iOS and iPadOS (high 7.5)
- [CVE-2024-27878](https://insights.sbomify.com/CVE-2024-27878/): Memory corruption in macOS (medium 6.5)
- [CVE-2024-27877](https://insights.sbomify.com/CVE-2024-27877/): Memory corruption in macOS (medium 6.1)
- [CVE-2024-27876](https://insights.sbomify.com/CVE-2024-27876/): Race condition in iOS and iPadOS (high 8.1)
- [CVE-2024-27875](https://insights.sbomify.com/CVE-2024-27875/): Business logic in macOS (medium 5.5)
- [CVE-2024-27874](https://insights.sbomify.com/CVE-2024-27874/): Denial of service in iOS and iPadOS (high 7.5)
- [CVE-2024-27873](https://insights.sbomify.com/CVE-2024-27873/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2024-27872](https://insights.sbomify.com/CVE-2024-27872/): Path traversal in macOS (medium 5.5)
- [CVE-2024-27871](https://insights.sbomify.com/CVE-2024-27871/): Path traversal in iOS and iPadOS (medium 5.5)
- [CVE-2024-2787](https://insights.sbomify.com/CVE-2024-2787/): Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Page Title HTML Tag (medium 6.4)
- [CVE-2024-27869](https://insights.sbomify.com/CVE-2024-27869/): Security feature bypass in iOS and iPadOS (high 7.5)
- [CVE-2024-27867](https://insights.sbomify.com/CVE-2024-27867/): Auth bypass in AirPods (low 3.3)
- [CVE-2024-27863](https://insights.sbomify.com/CVE-2024-27863/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-27862](https://insights.sbomify.com/CVE-2024-27862/): Business logic in macOS (medium 5.3)
- [CVE-2024-27861](https://insights.sbomify.com/CVE-2024-27861/): Memory corruption in macOS (medium 5.5)
- [CVE-2024-27860](https://insights.sbomify.com/CVE-2024-27860/): Memory corruption in macOS (medium 5.5)
- [CVE-2024-2786](https://insights.sbomify.com/CVE-2024-2786/): Happy Addons for Elementor <= 3.10.4 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via title_tag (medium 5.4)
- [CVE-2024-27859](https://insights.sbomify.com/CVE-2024-27859/): Memory corruption in iOS and iPadOS (high 8.8)
- [CVE-2024-27858](https://insights.sbomify.com/CVE-2024-27858/): Security feature bypass in macOS (medium 5.5)
- [CVE-2024-27857](https://insights.sbomify.com/CVE-2024-27857/): Memory corruption in iOS and iPadOS (high 7.1)
- [CVE-2024-27856](https://insights.sbomify.com/CVE-2024-27856/): Code injection in Safari (high 7.8)
- [CVE-2024-27855](https://insights.sbomify.com/CVE-2024-27855/): Security feature bypass in iOS and iPadOS (high 8.8)
- [CVE-2024-27853](https://insights.sbomify.com/CVE-2024-27853/): Security feature bypass in macOS (medium 4.4)
- [CVE-2024-27852](https://insights.sbomify.com/CVE-2024-27852/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-27851](https://insights.sbomify.com/CVE-2024-27851/): Memory corruption in Safari (high 7.5)
- [CVE-2024-27850](https://insights.sbomify.com/CVE-2024-27850/): Information disclosure in Safari (medium 6.5)
- [CVE-2024-2785](https://insights.sbomify.com/CVE-2024-2785/): The Plus Addons for Elementor <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate (medium 6.4)
- [CVE-2024-27849](https://insights.sbomify.com/CVE-2024-27849/): Information disclosure in macOS (low 3.3)
- [CVE-2024-27848](https://insights.sbomify.com/CVE-2024-27848/): Privilege escalation in iOS and iPadOS (high 7.4)
- [CVE-2024-27847](https://insights.sbomify.com/CVE-2024-27847/): Security feature bypass in iOS and iPadOS (high 7.4)
- [CVE-2024-27845](https://insights.sbomify.com/CVE-2024-27845/): Information disclosure in iOS and iPadOS (low 3.3)
- [CVE-2024-27844](https://insights.sbomify.com/CVE-2024-27844/): Security feature bypass in Safari (critical 9.1)
- [CVE-2024-27843](https://insights.sbomify.com/CVE-2024-27843/): Privilege escalation in macOS (high 7.8)
- [CVE-2024-27842](https://insights.sbomify.com/CVE-2024-27842/): Privilege escalation in macOS (high 8.1)
- [CVE-2024-27841](https://insights.sbomify.com/CVE-2024-27841/): Information disclosure in iOS and iPadOS (critical 9.8)
- [CVE-2024-27840](https://insights.sbomify.com/CVE-2024-27840/): Security feature bypass in iOS and iPadOS (high 7.5)
- [CVE-2024-2784](https://insights.sbomify.com/CVE-2024-2784/): The Plus Addons for Elementor <= 5.5.4 - Authenticated (Contibutor+) Stored Cross-Site Scripting via Hover Card (medium 6.4)
- [CVE-2024-27839](https://insights.sbomify.com/CVE-2024-27839/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2024-27838](https://insights.sbomify.com/CVE-2024-27838/): Cross-site scripting in Safari (medium 6.5)
- [CVE-2024-27837](https://insights.sbomify.com/CVE-2024-27837/): Security feature bypass in macOS (high 7.7)
- [CVE-2024-27836](https://insights.sbomify.com/CVE-2024-27836/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2024-27835](https://insights.sbomify.com/CVE-2024-27835/): Auth bypass in iOS and iPadOS (low 2.4)
- [CVE-2024-27834](https://insights.sbomify.com/CVE-2024-27834/): Security feature bypass in Safari (high 8.1)
- [CVE-2024-27833](https://insights.sbomify.com/CVE-2024-27833/): Integer overflow in Safari (high 7.5)
- [CVE-2024-27832](https://insights.sbomify.com/CVE-2024-27832/): Privilege escalation in iOS and iPadOS (critical 9.1)
- [CVE-2024-27831](https://insights.sbomify.com/CVE-2024-27831/): Memory corruption in iOS and iPadOS (high 7.5)
- [CVE-2024-27830](https://insights.sbomify.com/CVE-2024-27830/): Information disclosure in Safari (medium 6.5)
- [CVE-2024-2783](https://insights.sbomify.com/CVE-2024-2783/): Cross-site scripting in GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress (medium 6.4)
- [CVE-2024-27829](https://insights.sbomify.com/CVE-2024-27829/): Memory corruption in macOS (high 7.5)
- [CVE-2024-27828](https://insights.sbomify.com/CVE-2024-27828/): Memory corruption in iOS and iPadOS (high 7.0)
- [CVE-2024-27827](https://insights.sbomify.com/CVE-2024-27827/): Path traversal in macOS (medium 6.2)
- [CVE-2024-27826](https://insights.sbomify.com/CVE-2024-27826/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2024-27825](https://insights.sbomify.com/CVE-2024-27825/): Security feature bypass in macOS (high 7.8)
- [CVE-2024-27824](https://insights.sbomify.com/CVE-2024-27824/): Privilege escalation in macOS (high 7.8)
- [CVE-2024-27823](https://insights.sbomify.com/CVE-2024-27823/): Race condition in iOS and iPadOS (medium 5.9)
- [CVE-2024-27822](https://insights.sbomify.com/CVE-2024-27822/): Privilege escalation in macOS (high 7.4)
- [CVE-2024-27821](https://insights.sbomify.com/CVE-2024-27821/): Path traversal in iOS and iPadOS (high 7.5)
- [CVE-2024-27820](https://insights.sbomify.com/CVE-2024-27820/): Memory corruption in Safari (high 7.5)
- [CVE-2024-2782](https://insights.sbomify.com/CVE-2024-2782/): Missing authorization in Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder (high 7.5)
- [CVE-2024-27819](https://insights.sbomify.com/CVE-2024-27819/): Security feature bypass in iOS and iPadOS (low 2.4)
- [CVE-2024-27818](https://insights.sbomify.com/CVE-2024-27818/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2024-27817](https://insights.sbomify.com/CVE-2024-27817/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2024-27816](https://insights.sbomify.com/CVE-2024-27816/): Business logic in iOS and iPadOS (medium 5.3)
- [CVE-2024-27815](https://insights.sbomify.com/CVE-2024-27815/): Memory corruption in iOS and iPadOS (medium 5.9)
- [CVE-2024-27814](https://insights.sbomify.com/CVE-2024-27814/): Information disclosure in watchOS (low 2.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/403/