# Vulnerabilities published in 2024


- [CVE-2024-27232](https://insights.sbomify.com/CVE-2024-27232/): Memory corruption in Android (medium 5.5)
- [CVE-2024-27231](https://insights.sbomify.com/CVE-2024-27231/): Memory corruption in Android (medium 5.9)
- [CVE-2024-27230](https://insights.sbomify.com/CVE-2024-27230/): Memory corruption in Android (medium 5.1)
- [CVE-2024-2723](https://insights.sbomify.com/CVE-2024-2723/): SQL injection vulnerability in the CIGESv2 system (critical 9.8)
- [CVE-2024-27229](https://insights.sbomify.com/CVE-2024-27229/): Null dereference in Android (high 7.5)
- [CVE-2024-27228](https://insights.sbomify.com/CVE-2024-27228/): Memory corruption in Android (critical 9.8)
- [CVE-2024-27227](https://insights.sbomify.com/CVE-2024-27227/): Memory corruption in Android (critical 9.8)
- [CVE-2024-27226](https://insights.sbomify.com/CVE-2024-27226/): Memory corruption in Android (high 8.4)
- [CVE-2024-27225](https://insights.sbomify.com/CVE-2024-27225/): Memory corruption in Android (medium 4.4)
- [CVE-2024-27224](https://insights.sbomify.com/CVE-2024-27224/): Memory corruption in Android (high 7.8)
- [CVE-2024-27223](https://insights.sbomify.com/CVE-2024-27223/): Memory corruption in Android (medium 5.1)
- [CVE-2024-27222](https://insights.sbomify.com/CVE-2024-27222/): Privilege escalation in Android (high 7.8)
- [CVE-2024-27221](https://insights.sbomify.com/CVE-2024-27221/): Memory corruption in Android (high 7.8)
- [CVE-2024-27220](https://insights.sbomify.com/CVE-2024-27220/): Memory corruption in Android (high 8.4)
- [CVE-2024-2722](https://insights.sbomify.com/CVE-2024-2722/): SQL injection vulnerability in the CIGESv2 system (critical 9.8)
- [CVE-2024-27219](https://insights.sbomify.com/CVE-2024-27219/): Memory corruption in Android (high 8.4)
- [CVE-2024-27218](https://insights.sbomify.com/CVE-2024-27218/): Memory corruption in Android (medium 6.2)
- [CVE-2024-27217](https://insights.sbomify.com/CVE-2024-27217/): MSDP has a use after free vulnerability (medium 6.5)
- [CVE-2024-27213](https://insights.sbomify.com/CVE-2024-27213/): Use after free in Android (high 8.4)
- [CVE-2024-27212](https://insights.sbomify.com/CVE-2024-27212/): Memory corruption in Android (high 7.8)
- [CVE-2024-27211](https://insights.sbomify.com/CVE-2024-27211/): Memory corruption in Android (high 7.7)
- [CVE-2024-27210](https://insights.sbomify.com/CVE-2024-27210/): Memory corruption in Android (high 7.8)
- [CVE-2024-2721](https://insights.sbomify.com/CVE-2024-2721/): WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability (high 8.2)
- [CVE-2024-27209](https://insights.sbomify.com/CVE-2024-27209/): Memory corruption in Android (high 8.4)
- [CVE-2024-27208](https://insights.sbomify.com/CVE-2024-27208/): Memory corruption in Android (high 8.4)
- [CVE-2024-27207](https://insights.sbomify.com/CVE-2024-27207/): Security feature bypass in Android (critical 9.1)
- [CVE-2024-27206](https://insights.sbomify.com/CVE-2024-27206/): Memory corruption in Android (high 7.5)
- [CVE-2024-27205](https://insights.sbomify.com/CVE-2024-27205/): Use after free in Android (high 8.4)
- [CVE-2024-27204](https://insights.sbomify.com/CVE-2024-27204/): Memory corruption in Android (high 8.4)
- [CVE-2024-27202](https://insights.sbomify.com/CVE-2024-27202/): BIG-IP TMUI XSS vulnerability (medium 4.7)
- [CVE-2024-27201](https://insights.sbomify.com/CVE-2024-27201/): Other in OAS Platform (medium 4.9)
- [CVE-2024-27200](https://insights.sbomify.com/CVE-2024-27200/): Privilege escalation in Intel(R) Granulate(TM) software (medium 4.8)
- [CVE-2024-2720](https://insights.sbomify.com/CVE-2024-2720/): Campcodes Complete Online DJ Booking System aboutus.php cross site scripting (low 3.5)
- [CVE-2024-27199](https://insights.sbomify.com/CVE-2024-27199/): JetBrains TeamCity Relative Path Traversal (high 7.3, exploited in the wild)
- [CVE-2024-27198](https://insights.sbomify.com/CVE-2024-27198/): JetBrains TeamCity Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2024-27197](https://insights.sbomify.com/CVE-2024-27197/): WordPress BeePress plugin <= 6.9.8 - CSRF to Stored Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-27196](https://insights.sbomify.com/CVE-2024-27196/): WordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-27195](https://insights.sbomify.com/CVE-2024-27195/): WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability (high 7.1)
- [CVE-2024-27194](https://insights.sbomify.com/CVE-2024-27194/): WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability (high 7.1)
- [CVE-2024-27193](https://insights.sbomify.com/CVE-2024-27193/): WordPress PayU India plugin <= 3.8.8 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-27192](https://insights.sbomify.com/CVE-2024-27192/): WordPress Configure SMTP Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2024-27191](https://insights.sbomify.com/CVE-2024-27191/): WordPress Slivery Extender plugin <= 1.0.2 - Remote Code Execution (RCE) vulnerability (high 8.5)
- [CVE-2024-27190](https://insights.sbomify.com/CVE-2024-27190/): WordPress Download Media plugin <= 1.4.2 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-2719](https://insights.sbomify.com/CVE-2024-2719/): Campcodes Complete Online DJ Booking System admin-profile.php cross site scripting (low 3.5)
- [CVE-2024-27189](https://insights.sbomify.com/CVE-2024-27189/): WordPress WP Social Widget plugin <= 2.2.5 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2024-27188](https://insights.sbomify.com/CVE-2024-27188/): WordPress Breeze plugin <= 2.1.3 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2024-27187](https://insights.sbomify.com/CVE-2024-27187/): [20240804] - Core - Improper ACL for backend profile view (high 7.5)
- [CVE-2024-27186](https://insights.sbomify.com/CVE-2024-27186/): [20240803] - Core - XSS in HTML Mail Templates (medium 6.1)
- [CVE-2024-27185](https://insights.sbomify.com/CVE-2024-27185/): [20240802] - Core - Cache Poisoning in Pagination (critical 9.1)
- [CVE-2024-27184](https://insights.sbomify.com/CVE-2024-27184/): [20240801] - Core - Inadequate validation of internal URLs (medium 6.1)
- [CVE-2024-27183](https://insights.sbomify.com/CVE-2024-27183/): Extension - dj-extensions.com - XSS vulnerability in DJ-HelpfulArticles component for Joomla 1.0.0-1.1.0 (medium 6.1)
- [CVE-2024-27182](https://insights.sbomify.com/CVE-2024-27182/): Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability (medium 4.9)
- [CVE-2024-27181](https://insights.sbomify.com/CVE-2024-27181/): Apache Linkis Basic management services: Privilege Escalation Attack vulnerability (high 8.8)
- [CVE-2024-27180](https://insights.sbomify.com/CVE-2024-27180/): TOCTOU vulnerability (medium 6.7)
- [CVE-2024-2718](https://insights.sbomify.com/CVE-2024-2718/): Campcodes Complete Online DJ Booking System booking-bwdates-reports-details.php cross site scripting (low 3.5)
- [CVE-2024-27179](https://insights.sbomify.com/CVE-2024-27179/): Session disclosure inside the log files (medium 4.7)
- [CVE-2024-27178](https://insights.sbomify.com/CVE-2024-27178/): Remote Code Execution (high 7.2)
- [CVE-2024-27177](https://insights.sbomify.com/CVE-2024-27177/): Remote Code Execution (high 7.2)
- [CVE-2024-27176](https://insights.sbomify.com/CVE-2024-27176/): Remote Code Execution (high 7.2)
- [CVE-2024-27175](https://insights.sbomify.com/CVE-2024-27175/): Local File Inclusion (medium 4.4)
- [CVE-2024-27174](https://insights.sbomify.com/CVE-2024-27174/): insecure upload (critical 9.8)
- [CVE-2024-27173](https://insights.sbomify.com/CVE-2024-27173/): insecure upload (critical 9.8)
- [CVE-2024-27172](https://insights.sbomify.com/CVE-2024-27172/): Remote Code Execution (critical 9.8)
- [CVE-2024-27171](https://insights.sbomify.com/CVE-2024-27171/): Insecure permissions (high 7.4)
- [CVE-2024-27170](https://insights.sbomify.com/CVE-2024-27170/): Hardcoded credentials for WebDAV access (high 7.4)
- [CVE-2024-2717](https://insights.sbomify.com/CVE-2024-2717/): Campcodes Complete Online DJ Booking System booking-search.php cross site scripting (low 3.5)
- [CVE-2024-27169](https://insights.sbomify.com/CVE-2024-27169/): Lack of authentication (high 8.4)
- [CVE-2024-27168](https://insights.sbomify.com/CVE-2024-27168/): Hardcoded keys used to generate authentication cookies (high 7.1)
- [CVE-2024-27167](https://insights.sbomify.com/CVE-2024-27167/): Insecure permissions (high 7.4)
- [CVE-2024-27166](https://insights.sbomify.com/CVE-2024-27166/): Insecure permissions (high 7.4)
- [CVE-2024-27165](https://insights.sbomify.com/CVE-2024-27165/): Local Privilege Escalation (high 7.8)
- [CVE-2024-27164](https://insights.sbomify.com/CVE-2024-27164/): Hardcoded credentials (high 7.1)
- [CVE-2024-27163](https://insights.sbomify.com/CVE-2024-27163/): Leak of admin password and passwords (medium 6.5)
- [CVE-2024-27162](https://insights.sbomify.com/CVE-2024-27162/): DOM-based XSS (medium 6.1)
- [CVE-2024-27161](https://insights.sbomify.com/CVE-2024-27161/): Hardcoded password used to encrypt files (medium 6.2)
- [CVE-2024-27160](https://insights.sbomify.com/CVE-2024-27160/): Hardcoded password used to encrypt logs and use of weak cipher (medium 6.2)
- [CVE-2024-2716](https://insights.sbomify.com/CVE-2024-2716/): Campcodes Complete Online DJ Booking System contactus.php cross site scripting (low 3.5)
- [CVE-2024-27159](https://insights.sbomify.com/CVE-2024-27159/): Hardcoded password used to encrypt logs (medium 6.2)
- [CVE-2024-27158](https://insights.sbomify.com/CVE-2024-27158/): Hardcoded root password (high 7.4)
- [CVE-2024-27157](https://insights.sbomify.com/CVE-2024-27157/): Leak of authentication sessions in secure logs (medium 6.8)
- [CVE-2024-27156](https://insights.sbomify.com/CVE-2024-27156/): Leak of authentication sessions in secure logs (medium 6.8)
- [CVE-2024-27155](https://insights.sbomify.com/CVE-2024-27155/): Local Privilege Escalation and Remote Code Execution using insecure permissions (high 7.7)
- [CVE-2024-27154](https://insights.sbomify.com/CVE-2024-27154/): Passwords are stored in clear-text logs. (medium 6.2)
- [CVE-2024-27153](https://insights.sbomify.com/CVE-2024-27153/): Local Privilege Escalation and Remote Code Execution (high 7.4)
- [CVE-2024-27152](https://insights.sbomify.com/CVE-2024-27152/): Local Privilege Escalation and Remote Code Execution using insecure permissions (high 7.4)
- [CVE-2024-27151](https://insights.sbomify.com/CVE-2024-27151/): Local Privilege Escalation and Remote Code Execution using insecure permissions (high 7.4)
- [CVE-2024-27150](https://insights.sbomify.com/CVE-2024-27150/): Local Privilege Escalation and Remote Code Execution using insecure LD_LIBRARY_PATH (high 7.4)
- [CVE-2024-2715](https://insights.sbomify.com/CVE-2024-2715/): Campcodes Complete Online DJ Booking System user-search.php cross site scripting (low 3.5)
- [CVE-2024-27149](https://insights.sbomify.com/CVE-2024-27149/): Local Privilege Escalation and Remote Code Execution using insecure LD_PRELOAD (high 7.4)
- [CVE-2024-27148](https://insights.sbomify.com/CVE-2024-27148/): Local Privilege Escalation and Remote Code Execution using insecure PATH (high 7.4)
- [CVE-2024-27147](https://insights.sbomify.com/CVE-2024-27147/): Local Privilege Escalation and Remote Code Execution using snmpd (high 7.4)
- [CVE-2024-27146](https://insights.sbomify.com/CVE-2024-27146/): Lack of privileges separation (medium 6.7)
- [CVE-2024-27145](https://insights.sbomify.com/CVE-2024-27145/): Multiple Post-authenticated Remote Code Execution (critical 9.8)
- [CVE-2024-27144](https://insights.sbomify.com/CVE-2024-27144/): Pre-authenticated Remote Code Execution (critical 9.8)
- [CVE-2024-27143](https://insights.sbomify.com/CVE-2024-27143/): Pre-authenticated Remote Code Execution (critical 9.8)
- [CVE-2024-27142](https://insights.sbomify.com/CVE-2024-27142/): Pre-authenticated XXE injection (medium 5.9)
- [CVE-2024-27141](https://insights.sbomify.com/CVE-2024-27141/): Pre-authenticated Time-Based Blind XXE injection (medium 5.9)
- [CVE-2024-27140](https://insights.sbomify.com/CVE-2024-27140/): Apache Archiva: reflected XSS (medium 5.4)
- [CVE-2024-2714](https://insights.sbomify.com/CVE-2024-2714/): Campcodes Complete Online DJ Booking System booking-bwdates-reports-details.php sql injection (medium 6.3)
- [CVE-2024-27139](https://insights.sbomify.com/CVE-2024-27139/): Apache Archiva: incorrect authentication potentially leading to account takeover (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/408/