# Vulnerabilities published in 2024


- [CVE-2024-27138](https://insights.sbomify.com/CVE-2024-27138/): Apache Archiva: disabling user registration is not effective (high 7.5)
- [CVE-2024-27137](https://insights.sbomify.com/CVE-2024-27137/): Apache Cassandra: unrestricted deserialization of JMX authentication credentials (medium 5.3)
- [CVE-2024-27136](https://insights.sbomify.com/CVE-2024-27136/): Apache JSPWiki: Cross-site scripting vulnerability on upload page (medium 6.1)
- [CVE-2024-27135](https://insights.sbomify.com/CVE-2024-27135/): Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution (high 8.5)
- [CVE-2024-27134](https://insights.sbomify.com/CVE-2024-27134/): Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf (high 7.0)
- [CVE-2024-27133](https://insights.sbomify.com/CVE-2024-27133/): Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. (high 7.5)
- [CVE-2024-27132](https://insights.sbomify.com/CVE-2024-27132/): Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe. (high 7.5)
- [CVE-2024-27130](https://insights.sbomify.com/CVE-2024-27130/): QTS, QuTS hero (high 7.2)
- [CVE-2024-2713](https://insights.sbomify.com/CVE-2024-2713/): Campcodes Complete Online DJ Booking System booking-search.php sql injection (medium 6.3)
- [CVE-2024-27129](https://insights.sbomify.com/CVE-2024-27129/): QTS, QuTS hero (medium 6.4)
- [CVE-2024-27128](https://insights.sbomify.com/CVE-2024-27128/): QTS, QuTS hero (medium 6.4)
- [CVE-2024-27127](https://insights.sbomify.com/CVE-2024-27127/): QTS, QuTS hero (high 7.2)
- [CVE-2024-27126](https://insights.sbomify.com/CVE-2024-27126/): Notes Station 3 (medium 6.3)
- [CVE-2024-27125](https://insights.sbomify.com/CVE-2024-27125/): Helpdesk (low 3.5)
- [CVE-2024-27124](https://insights.sbomify.com/CVE-2024-27124/): QTS, QuTS hero, QuTScloud (high 7.5)
- [CVE-2024-27123](https://insights.sbomify.com/CVE-2024-27123/): QcalAgent (medium 5.2)
- [CVE-2024-27122](https://insights.sbomify.com/CVE-2024-27122/): Notes Station 3 (medium 6.3)
- [CVE-2024-27121](https://insights.sbomify.com/CVE-2024-27121/): Path traversal in Machine Automation Controller NJ Series (high 7.2)
- [CVE-2024-27120](https://insights.sbomify.com/CVE-2024-27120/): Local File Inclusion in ComfortKey before version 24.1.2 (high 7.7)
- [CVE-2024-2712](https://insights.sbomify.com/CVE-2024-2712/): Campcodes Complete Online DJ Booking System user-search.php sql injection (medium 6.3)
- [CVE-2024-27115](https://insights.sbomify.com/CVE-2024-27115/): Remote Code Execution through File Upload in SOPlanning before 1.52.02 (critical 10.0)
- [CVE-2024-27114](https://insights.sbomify.com/CVE-2024-27114/): Remote Code Execution through File Upload in SOPlanning before 1.52.02 (high 8.9)
- [CVE-2024-27113](https://insights.sbomify.com/CVE-2024-27113/): Insecure Direct Object Reference to export Database in SOPlanning before 1.52.02 (critical 9.3)
- [CVE-2024-27112](https://insights.sbomify.com/CVE-2024-27112/): SQL Injection in SOPlanning before 1.52.02 (critical 9.3)
- [CVE-2024-27110](https://insights.sbomify.com/CVE-2024-27110/): Elevation of privilege vulnerability in GE HealthCare EchoPAC products (high 8.4)
- [CVE-2024-2711](https://insights.sbomify.com/CVE-2024-2711/): Tenda AC10U addWifiMacFilter stack-based overflow (high 8.8)
- [CVE-2024-27109](https://insights.sbomify.com/CVE-2024-27109/): Insufficiently protected credentials in GE HealthCare EchoPAC products (high 7.6)
- [CVE-2024-27108](https://insights.sbomify.com/CVE-2024-27108/): Non privileged access to critical file vulnerability in GE HealthCare EchoPAC products (medium 6.8)
- [CVE-2024-27107](https://insights.sbomify.com/CVE-2024-27107/): Weak account password in GE HealthCare EchoPAC products (critical 9.6)
- [CVE-2024-27106](https://insights.sbomify.com/CVE-2024-27106/): Vulnerable data in transit in GE HealthCare EchoPAC products (medium 5.7)
- [CVE-2024-27105](https://insights.sbomify.com/CVE-2024-27105/): Frappe File Permissions can by bypassed using certain endpoints (high 8.1)
- [CVE-2024-27104](https://insights.sbomify.com/CVE-2024-27104/): Stored XSS in dashboards in GLPI (medium 4.5)
- [CVE-2024-27103](https://insights.sbomify.com/CVE-2024-27103/): Querybook Stored Cross-Site Scripting allows Privilege Elevation (medium 6.1)
- [CVE-2024-27102](https://insights.sbomify.com/CVE-2024-27102/): Improper isolation of server file access in github.com/pterodactyl/wings (critical 10.0)
- [CVE-2024-27101](https://insights.sbomify.com/CVE-2024-27101/): Integer overflow in chunking helper causes dispatching to miss elements or panic (high 7.3)
- [CVE-2024-27100](https://insights.sbomify.com/CVE-2024-27100/): Denial of service via Staff Actions in Discourse (medium 6.5)
- [CVE-2024-2710](https://insights.sbomify.com/CVE-2024-2710/): Tenda AC10U openSchedWifi setSchedWifi stack-based overflow (high 8.8)
- [CVE-2024-27099](https://insights.sbomify.com/CVE-2024-27099/): Azure IoT Platform Device SDK Double Free Vulnerability (critical 9.8)
- [CVE-2024-27098](https://insights.sbomify.com/CVE-2024-27098/): Blind Server-Side Request Forgery (SSRF) using Arbitrary Object Instantiation in GLPI (medium 6.4)
- [CVE-2024-27097](https://insights.sbomify.com/CVE-2024-27097/): Potential log injection in reset user endpoint in ckan (medium 4.3)
- [CVE-2024-27096](https://insights.sbomify.com/CVE-2024-27096/): SQL Injection in through the search engine (high 7.7)
- [CVE-2024-27095](https://insights.sbomify.com/CVE-2024-27095/): Decidim cross-site scripting (XSS) in the admin panel (medium 5.4)
- [CVE-2024-27094](https://insights.sbomify.com/CVE-2024-27094/): OpenZeppelin Contracts base64 encoding may read from potentially dirty memory (medium 6.5)
- [CVE-2024-27093](https://insights.sbomify.com/CVE-2024-27093/): Minder trusts client-provided mapping from repo name to upstream ID (medium 4.6)
- [CVE-2024-27092](https://insights.sbomify.com/CVE-2024-27092/): Content spoofing - real Hoppscotch emails (medium 5.4)
- [CVE-2024-27091](https://insights.sbomify.com/CVE-2024-27091/): GeoNode stored XSS to full account takeover (medium 6.1)
- [CVE-2024-27090](https://insights.sbomify.com/CVE-2024-27090/): Decidim vulnerable to data disclosure through the embed feature (medium 5.3)
- [CVE-2024-2709](https://insights.sbomify.com/CVE-2024-2709/): Tenda AC10U SetStaticRouteCfg fromSetRouteStatic stack-based overflow (high 8.8)
- [CVE-2024-27088](https://insights.sbomify.com/CVE-2024-27088/): es5-ext Regular Expression Denial of Service in `function#copy` and `function#toStringTokens` (not scored)
- [CVE-2024-27087](https://insights.sbomify.com/CVE-2024-27087/): Kirby cross-site scripting (XSS) in the link field "Custom" type (medium 4.6)
- [CVE-2024-27086](https://insights.sbomify.com/CVE-2024-27086/): MSAL.NET applications targeting Xamarin Android and .NET Android (MAUI) susceptible to local denial of service (low 3.9)
- [CVE-2024-27085](https://insights.sbomify.com/CVE-2024-27085/): Denial of service through invites in Discourse (medium 6.5)
- [CVE-2024-27083](https://insights.sbomify.com/CVE-2024-27083/): Flask-AppBuilder's OAuth login page subject to Cross Site Scripting (XSS) (medium 4.3)
- [CVE-2024-27082](https://insights.sbomify.com/CVE-2024-27082/): Cacti Cross-site Scripting vulnerability when managing trees (high 7.6)
- [CVE-2024-27081](https://insights.sbomify.com/CVE-2024-27081/): ESPHome remote code execution via arbitrary file write (high 7.2)
- [CVE-2024-27080](https://insights.sbomify.com/CVE-2024-27080/): btrfs: fix race when detecting delalloc ranges during fiemap (medium 4.7)
- [CVE-2024-2708](https://insights.sbomify.com/CVE-2024-2708/): Tenda AC10U execCommand formexeCommand stack-based overflow (high 8.8)
- [CVE-2024-27079](https://insights.sbomify.com/CVE-2024-27079/): iommu/vt-d: Fix NULL domain on device release (medium 5.5)
- [CVE-2024-27078](https://insights.sbomify.com/CVE-2024-27078/): media: v4l2-tpg: fix some memleaks in tpg_alloc (medium 5.5)
- [CVE-2024-27077](https://insights.sbomify.com/CVE-2024-27077/): media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (medium 5.5)
- [CVE-2024-27076](https://insights.sbomify.com/CVE-2024-27076/): media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (medium 5.5)
- [CVE-2024-27075](https://insights.sbomify.com/CVE-2024-27075/): media: dvb-frontends: avoid stack overflow warnings with clang (high 7.8)
- [CVE-2024-27074](https://insights.sbomify.com/CVE-2024-27074/): media: go7007: fix a memleak in go7007_load_encoder (medium 5.5)
- [CVE-2024-27073](https://insights.sbomify.com/CVE-2024-27073/): media: ttpci: fix two memleaks in budget_av_attach (high 7.8)
- [CVE-2024-27072](https://insights.sbomify.com/CVE-2024-27072/): media: usbtv: Remove useless locks in usbtv_video_free() (medium 5.5)
- [CVE-2024-27071](https://insights.sbomify.com/CVE-2024-27071/): backlight: hx8357: Fix potential NULL pointer dereference (medium 5.5)
- [CVE-2024-27070](https://insights.sbomify.com/CVE-2024-27070/): f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault (high 7.1)
- [CVE-2024-2707](https://insights.sbomify.com/CVE-2024-2707/): Tenda AC10U WriteFacMac formWriteFacMac os command injection (medium 6.3)
- [CVE-2024-27069](https://insights.sbomify.com/CVE-2024-27069/): ovl: relax WARN_ON in ovl_verify_area() (medium 5.5)
- [CVE-2024-27068](https://insights.sbomify.com/CVE-2024-27068/): thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error handling path (medium 5.5)
- [CVE-2024-27067](https://insights.sbomify.com/CVE-2024-27067/): xen/evtchn: avoid WARN() when unbinding an event channel (medium 5.5)
- [CVE-2024-27066](https://insights.sbomify.com/CVE-2024-27066/): virtio: packed: fix unmap leak for indirect desc table (high 7.5)
- [CVE-2024-27065](https://insights.sbomify.com/CVE-2024-27065/): netfilter: nf_tables: do not compare internal table flags on updates (high 7.8)
- [CVE-2024-27064](https://insights.sbomify.com/CVE-2024-27064/): netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (medium 5.5)
- [CVE-2024-27063](https://insights.sbomify.com/CVE-2024-27063/): leds: trigger: netdev: Fix kernel panic on interface rename trig notify (medium 5.5)
- [CVE-2024-27062](https://insights.sbomify.com/CVE-2024-27062/): nouveau: lock the client object tree. (high 7.8)
- [CVE-2024-27061](https://insights.sbomify.com/CVE-2024-27061/): crypto: sun8i-ce - Fix use after free in unprepare (high 7.8)
- [CVE-2024-27060](https://insights.sbomify.com/CVE-2024-27060/): thunderbolt: Fix NULL pointer dereference in tb_port_update_credits() (medium 5.5)
- [CVE-2024-2706](https://insights.sbomify.com/CVE-2024-2706/): Tenda AC10U WifiWpsStart formWifiWpsStart stack-based overflow (high 8.8)
- [CVE-2024-27059](https://insights.sbomify.com/CVE-2024-27059/): USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (medium 5.5)
- [CVE-2024-27058](https://insights.sbomify.com/CVE-2024-27058/): tmpfs: fix race on handling dquot rbtree (high 7.8)
- [CVE-2024-27057](https://insights.sbomify.com/CVE-2024-27057/): ASoC: SOF: ipc4-pcm: Workaround for crashed firmware on system suspend (medium 5.5)
- [CVE-2024-27056](https://insights.sbomify.com/CVE-2024-27056/): wifi: iwlwifi: mvm: ensure offloading TID queue exists (high 7.8)
- [CVE-2024-27054](https://insights.sbomify.com/CVE-2024-27054/): s390/dasd: fix double module refcount decrement (medium 5.5)
- [CVE-2024-27053](https://insights.sbomify.com/CVE-2024-27053/): wifi: wilc1000: fix RCU usage in connect path (high 8.8)
- [CVE-2024-27052](https://insights.sbomify.com/CVE-2024-27052/): wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (high 7.8)
- [CVE-2024-27051](https://insights.sbomify.com/CVE-2024-27051/): cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value (medium 5.5)
- [CVE-2024-27050](https://insights.sbomify.com/CVE-2024-27050/): libbpf: Use OPTS_SET() macro in bpf_xdp_query() (high 7.8)
- [CVE-2024-2705](https://insights.sbomify.com/CVE-2024-2705/): Tenda AC10U SetNetControlList formSetQosBand stack-based overflow (high 8.8)
- [CVE-2024-27049](https://insights.sbomify.com/CVE-2024-27049/): wifi: mt76: mt7925e: fix use-after-free in free_irq() (high 7.8)
- [CVE-2024-27048](https://insights.sbomify.com/CVE-2024-27048/): wifi: brcm80211: handle pmk_op allocation failure (medium 5.5)
- [CVE-2024-27047](https://insights.sbomify.com/CVE-2024-27047/): net: phy: fix phy_get_internal_delay accessing an empty array (medium 5.5)
- [CVE-2024-27046](https://insights.sbomify.com/CVE-2024-27046/): nfp: flower: handle acti_netdevs allocation failure (medium 5.5)
- [CVE-2024-27045](https://insights.sbomify.com/CVE-2024-27045/): drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' (high 7.0)
- [CVE-2024-27044](https://insights.sbomify.com/CVE-2024-27044/): drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' (medium 5.5)
- [CVE-2024-27043](https://insights.sbomify.com/CVE-2024-27043/): media: edia: dvbdev: fix a use-after-free (high 7.8)
- [CVE-2024-27041](https://insights.sbomify.com/CVE-2024-27041/): drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini() (medium 5.5)
- [CVE-2024-27040](https://insights.sbomify.com/CVE-2024-27040/): drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()' (medium 4.7)
- [CVE-2024-2704](https://insights.sbomify.com/CVE-2024-2704/): Tenda AC10U SetFirewallCfg formSetFirewallCfg stack-based overflow (high 8.8)
- [CVE-2024-27039](https://insights.sbomify.com/CVE-2024-27039/): clk: hisilicon: hi3559a: Fix an erroneous devm_kfree() (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/409/