# Vulnerabilities published in 2024


- [CVE-2024-26292](https://insights.sbomify.com/CVE-2024-26292/): Authenticated Arbitrary File Deletion affecting Avid NEXIS (high 7.1)
- [CVE-2024-26291](https://insights.sbomify.com/CVE-2024-26291/): Authenticated Arbitrary File Read affecting Avid NEXIS (high 8.7)
- [CVE-2024-26290](https://insights.sbomify.com/CVE-2024-26290/): Authenticated Remote Command Injection affecting Avid NEXIS (high 8.7)
- [CVE-2024-2629](https://insights.sbomify.com/CVE-2024-2629/): Other in Chrome (medium 4.3)
- [CVE-2024-26289](https://insights.sbomify.com/CVE-2024-26289/): Remote Code Inclusion Vulnerability in Multiple PMB Versions (critical 9.8)
- [CVE-2024-26288](https://insights.sbomify.com/CVE-2024-26288/): PHOENIX CONTACT: Lack of SSL support in CHARX Series (high 8.7)
- [CVE-2024-26284](https://insights.sbomify.com/CVE-2024-26284/): Cross-site scripting in Focus for iOS (medium 6.1)
- [CVE-2024-26283](https://insights.sbomify.com/CVE-2024-26283/): Cross-site scripting in Firefox for iOS (high 7.8)
- [CVE-2024-26282](https://insights.sbomify.com/CVE-2024-26282/): Cross-site scripting in Firefox for iOS (high 7.1)
- [CVE-2024-26281](https://insights.sbomify.com/CVE-2024-26281/): Cross-site scripting in Firefox for iOS (medium 4.7)
- [CVE-2024-26280](https://insights.sbomify.com/CVE-2024-26280/): Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs) (medium 4.7)
- [CVE-2024-2628](https://insights.sbomify.com/CVE-2024-2628/): Other in Chrome (medium 4.3)
- [CVE-2024-26279](https://insights.sbomify.com/CVE-2024-26279/): [20240704] - Core - XSS in Wrapper extensions (medium 6.1)
- [CVE-2024-26278](https://insights.sbomify.com/CVE-2024-26278/): [20240705] - Core - XSS in com_fields default field value (medium 4.6)
- [CVE-2024-26277](https://insights.sbomify.com/CVE-2024-26277/): Null dereference in JT2Go (medium 4.8)
- [CVE-2024-26276](https://insights.sbomify.com/CVE-2024-26276/): Denial of service in JT2Go (medium 4.8)
- [CVE-2024-26275](https://insights.sbomify.com/CVE-2024-26275/): Memory corruption in JT2Go (high 7.3)
- [CVE-2024-26273](https://insights.sbomify.com/CVE-2024-26273/): Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor (high 8.8)
- [CVE-2024-26272](https://insights.sbomify.com/CVE-2024-26272/): Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor (high 8.8)
- [CVE-2024-26271](https://insights.sbomify.com/CVE-2024-26271/): Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget (high 8.8)
- [CVE-2024-26270](https://insights.sbomify.com/CVE-2024-26270/): Liferay Portal and Liferay DXP vulnerable to theft of hashed password (medium 6.5)
- [CVE-2024-2627](https://insights.sbomify.com/CVE-2024-2627/): Use after free in Chrome (high 8.8)
- [CVE-2024-26269](https://insights.sbomify.com/CVE-2024-26269/): Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting (critical 9.6)
- [CVE-2024-26268](https://insights.sbomify.com/CVE-2024-26268/): Liferay Portal and Liferay DXP User Enumeration Vulnerability (medium 5.3)
- [CVE-2024-26267](https://insights.sbomify.com/CVE-2024-26267/): Liferay Portal and Liferay DXP HTTP Header Can Expose Versions (medium 5.3)
- [CVE-2024-26266](https://insights.sbomify.com/CVE-2024-26266/): Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting (critical 9.0)
- [CVE-2024-26265](https://insights.sbomify.com/CVE-2024-26265/): Liferay Portal vulnerable to Denial of Service (medium 5.0)
- [CVE-2024-26264](https://insights.sbomify.com/CVE-2024-26264/): EBM Technologies RISWEB - SQL Injection (critical 9.8)
- [CVE-2024-26263](https://insights.sbomify.com/CVE-2024-26263/): EBM Technologies RISWEB - Improper Access Control (medium 5.3)
- [CVE-2024-26262](https://insights.sbomify.com/CVE-2024-26262/): EBM Technologies Uniweb/SoliPACS WebServer - SQL Injection (high 8.8)
- [CVE-2024-26261](https://insights.sbomify.com/CVE-2024-26261/): Hgiga OAKlouds - Arbitrary File Read And Delete (critical 9.8)
- [CVE-2024-26260](https://insights.sbomify.com/CVE-2024-26260/): Hgiga OAKlouds - Command Injection (critical 9.8)
- [CVE-2024-2626](https://insights.sbomify.com/CVE-2024-2626/): Memory corruption in Chrome (medium 6.5)
- [CVE-2024-26258](https://insights.sbomify.com/CVE-2024-26258/): Command injection in WMC-2LX-B (medium 6.8)
- [CVE-2024-26257](https://insights.sbomify.com/CVE-2024-26257/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-26256](https://insights.sbomify.com/CVE-2024-26256/): Libarchive Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-26255](https://insights.sbomify.com/CVE-2024-26255/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-26254](https://insights.sbomify.com/CVE-2024-26254/): Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability (high 7.5)
- [CVE-2024-26253](https://insights.sbomify.com/CVE-2024-26253/): Windows rndismp6.sys Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-26252](https://insights.sbomify.com/CVE-2024-26252/): Windows rndismp6.sys Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-26251](https://insights.sbomify.com/CVE-2024-26251/): Microsoft SharePoint Server Spoofing Vulnerability (medium 6.8)
- [CVE-2024-26250](https://insights.sbomify.com/CVE-2024-26250/): Secure Boot Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2024-2625](https://insights.sbomify.com/CVE-2024-2625/): Use after free in Chrome (high 8.8)
- [CVE-2024-26248](https://insights.sbomify.com/CVE-2024-26248/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2024-26247](https://insights.sbomify.com/CVE-2024-26247/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 4.7)
- [CVE-2024-26246](https://insights.sbomify.com/CVE-2024-26246/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (low 3.9)
- [CVE-2024-26245](https://insights.sbomify.com/CVE-2024-26245/): Windows SMB Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26244](https://insights.sbomify.com/CVE-2024-26244/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-26243](https://insights.sbomify.com/CVE-2024-26243/): Windows USB Print Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-26242](https://insights.sbomify.com/CVE-2024-26242/): Windows Telephony Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-26241](https://insights.sbomify.com/CVE-2024-26241/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26240](https://insights.sbomify.com/CVE-2024-26240/): Secure Boot Security Feature Bypass Vulnerability (high 8.0)
- [CVE-2024-2624](https://insights.sbomify.com/CVE-2024-2624/): Path Traversal and Arbitrary File Upload Vulnerability in parisneo/lollms-webui (critical 9.4)
- [CVE-2024-26239](https://insights.sbomify.com/CVE-2024-26239/): Windows Telephony Server Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26238](https://insights.sbomify.com/CVE-2024-26238/): Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26237](https://insights.sbomify.com/CVE-2024-26237/): Windows Defender Credential Guard Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26236](https://insights.sbomify.com/CVE-2024-26236/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-26235](https://insights.sbomify.com/CVE-2024-26235/): Windows Update Stack Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26234](https://insights.sbomify.com/CVE-2024-26234/): Proxy Driver Spoofing Vulnerability (medium 6.7)
- [CVE-2024-26233](https://insights.sbomify.com/CVE-2024-26233/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26232](https://insights.sbomify.com/CVE-2024-26232/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (high 7.3)
- [CVE-2024-26231](https://insights.sbomify.com/CVE-2024-26231/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26230](https://insights.sbomify.com/CVE-2024-26230/): Windows Telephony Server Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-2623](https://insights.sbomify.com/CVE-2024-2623/): Cross-site scripting in Essential Addons for Elementor – Popular Elementor Templates & Widgets (medium 6.4)
- [CVE-2024-26229](https://insights.sbomify.com/CVE-2024-26229/): Windows CSC Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26228](https://insights.sbomify.com/CVE-2024-26228/): Windows Cryptographic Services Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2024-26227](https://insights.sbomify.com/CVE-2024-26227/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26226](https://insights.sbomify.com/CVE-2024-26226/): Windows Distributed File System (DFS) Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-26224](https://insights.sbomify.com/CVE-2024-26224/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26223](https://insights.sbomify.com/CVE-2024-26223/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26222](https://insights.sbomify.com/CVE-2024-26222/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26221](https://insights.sbomify.com/CVE-2024-26221/): Windows DNS Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26220](https://insights.sbomify.com/CVE-2024-26220/): Windows Mobile Hotspot Information Disclosure Vulnerability (medium 5.0)
- [CVE-2024-2622](https://insights.sbomify.com/CVE-2024-2622/): Fujian Kelixin Communication Command and Dispatch Platform editemedia.php sql injection (medium 6.3)
- [CVE-2024-26219](https://insights.sbomify.com/CVE-2024-26219/): HTTP.sys Denial of Service Vulnerability (high 7.5)
- [CVE-2024-26218](https://insights.sbomify.com/CVE-2024-26218/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26217](https://insights.sbomify.com/CVE-2024-26217/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-26216](https://insights.sbomify.com/CVE-2024-26216/): Windows File Server Resource Management Service Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-26215](https://insights.sbomify.com/CVE-2024-26215/): DHCP Server Service Denial of Service Vulnerability (high 7.5)
- [CVE-2024-26214](https://insights.sbomify.com/CVE-2024-26214/): Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-26213](https://insights.sbomify.com/CVE-2024-26213/): Microsoft Brokering File System Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-26212](https://insights.sbomify.com/CVE-2024-26212/): DHCP Server Service Denial of Service Vulnerability (high 7.5)
- [CVE-2024-26211](https://insights.sbomify.com/CVE-2024-26211/): Windows Remote Access Connection Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26210](https://insights.sbomify.com/CVE-2024-26210/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2621](https://insights.sbomify.com/CVE-2024-2621/): Fujian Kelixin Communication Command and Dispatch Platform pwd_update.php sql injection (medium 6.3)
- [CVE-2024-26209](https://insights.sbomify.com/CVE-2024-26209/): Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-26208](https://insights.sbomify.com/CVE-2024-26208/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26207](https://insights.sbomify.com/CVE-2024-26207/): Windows Remote Access Connection Manager Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-26205](https://insights.sbomify.com/CVE-2024-26205/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-26204](https://insights.sbomify.com/CVE-2024-26204/): Outlook for Android Information Disclosure Vulnerability (high 7.5)
- [CVE-2024-26203](https://insights.sbomify.com/CVE-2024-26203/): Azure Data Studio Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-26202](https://insights.sbomify.com/CVE-2024-26202/): DHCP Server Service Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-26201](https://insights.sbomify.com/CVE-2024-26201/): Microsoft Intune Linux Agent Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2024-26200](https://insights.sbomify.com/CVE-2024-26200/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2620](https://insights.sbomify.com/CVE-2024-2620/): Fujian Kelixin Communication Command and Dispatch Platform down_file.php sql injection (medium 6.3)
- [CVE-2024-26199](https://insights.sbomify.com/CVE-2024-26199/): Microsoft Office Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-26198](https://insights.sbomify.com/CVE-2024-26198/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-26197](https://insights.sbomify.com/CVE-2024-26197/): Windows Standards-Based Storage Management Service Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-26196](https://insights.sbomify.com/CVE-2024-26196/): Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability (medium 4.3)
- [CVE-2024-26195](https://insights.sbomify.com/CVE-2024-26195/): DHCP Server Service Remote Code Execution Vulnerability (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/416/