# Vulnerabilities published in 2024 - [CVE-2024-26097](https://insights.sbomify.com/CVE-2024-26097/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26096](https://insights.sbomify.com/CVE-2024-26096/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26095](https://insights.sbomify.com/CVE-2024-26095/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26094](https://insights.sbomify.com/CVE-2024-26094/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26093](https://insights.sbomify.com/CVE-2024-26093/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2024-26092](https://insights.sbomify.com/CVE-2024-26092/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26091](https://insights.sbomify.com/CVE-2024-26091/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26090](https://insights.sbomify.com/CVE-2024-26090/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-2609](https://insights.sbomify.com/CVE-2024-2609/): Security feature bypass in Firefox (medium 6.1) - [CVE-2024-26089](https://insights.sbomify.com/CVE-2024-26089/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26088](https://insights.sbomify.com/CVE-2024-26088/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26087](https://insights.sbomify.com/CVE-2024-26087/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26086](https://insights.sbomify.com/CVE-2024-26086/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4) - [CVE-2024-26085](https://insights.sbomify.com/CVE-2024-26085/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26084](https://insights.sbomify.com/CVE-2024-26084/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26083](https://insights.sbomify.com/CVE-2024-26083/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26082](https://insights.sbomify.com/CVE-2024-26082/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26081](https://insights.sbomify.com/CVE-2024-26081/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26080](https://insights.sbomify.com/CVE-2024-26080/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-2608](https://insights.sbomify.com/CVE-2024-2608/): Integer overflow in Firefox (high 8.4) - [CVE-2024-26079](https://insights.sbomify.com/CVE-2024-26079/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26078](https://insights.sbomify.com/CVE-2024-26078/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26077](https://insights.sbomify.com/CVE-2024-26077/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26076](https://insights.sbomify.com/CVE-2024-26076/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26075](https://insights.sbomify.com/CVE-2024-26075/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26074](https://insights.sbomify.com/CVE-2024-26074/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26073](https://insights.sbomify.com/CVE-2024-26073/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26072](https://insights.sbomify.com/CVE-2024-26072/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26071](https://insights.sbomify.com/CVE-2024-26071/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26070](https://insights.sbomify.com/CVE-2024-26070/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-2607](https://insights.sbomify.com/CVE-2024-2607/): Memory corruption in Firefox (high 8.1) - [CVE-2024-26069](https://insights.sbomify.com/CVE-2024-26069/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26068](https://insights.sbomify.com/CVE-2024-26068/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26067](https://insights.sbomify.com/CVE-2024-26067/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26066](https://insights.sbomify.com/CVE-2024-26066/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26065](https://insights.sbomify.com/CVE-2024-26065/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26064](https://insights.sbomify.com/CVE-2024-26064/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26063](https://insights.sbomify.com/CVE-2024-26063/): Adobe Experience Manager | Information Exposure (CWE-200) (medium 5.3) - [CVE-2024-26062](https://insights.sbomify.com/CVE-2024-26062/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26061](https://insights.sbomify.com/CVE-2024-26061/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26060](https://insights.sbomify.com/CVE-2024-26060/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-2606](https://insights.sbomify.com/CVE-2024-2606/): Memory corruption in Firefox (low 3.7) - [CVE-2024-26059](https://insights.sbomify.com/CVE-2024-26059/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26058](https://insights.sbomify.com/CVE-2024-26058/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26057](https://insights.sbomify.com/CVE-2024-26057/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26056](https://insights.sbomify.com/CVE-2024-26056/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26055](https://insights.sbomify.com/CVE-2024-26055/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26054](https://insights.sbomify.com/CVE-2024-26054/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26053](https://insights.sbomify.com/CVE-2024-26053/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26052](https://insights.sbomify.com/CVE-2024-26052/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26051](https://insights.sbomify.com/CVE-2024-26051/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26050](https://insights.sbomify.com/CVE-2024-26050/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 4.8) - [CVE-2024-2605](https://insights.sbomify.com/CVE-2024-2605/): Security feature bypass in Firefox (medium 5.9) - [CVE-2024-26049](https://insights.sbomify.com/CVE-2024-26049/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 4.8) - [CVE-2024-26047](https://insights.sbomify.com/CVE-2024-26047/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26046](https://insights.sbomify.com/CVE-2024-26046/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26045](https://insights.sbomify.com/CVE-2024-26045/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26044](https://insights.sbomify.com/CVE-2024-26044/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26043](https://insights.sbomify.com/CVE-2024-26043/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26042](https://insights.sbomify.com/CVE-2024-26042/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26041](https://insights.sbomify.com/CVE-2024-26041/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26040](https://insights.sbomify.com/CVE-2024-26040/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-2604](https://insights.sbomify.com/CVE-2024-2604/): SourceCodester File Manager App update-file.php unrestricted upload (medium 6.3) - [CVE-2024-26039](https://insights.sbomify.com/CVE-2024-26039/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26038](https://insights.sbomify.com/CVE-2024-26038/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26037](https://insights.sbomify.com/CVE-2024-26037/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26036](https://insights.sbomify.com/CVE-2024-26036/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26035](https://insights.sbomify.com/CVE-2024-26035/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26034](https://insights.sbomify.com/CVE-2024-26034/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26033](https://insights.sbomify.com/CVE-2024-26033/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26032](https://insights.sbomify.com/CVE-2024-26032/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4) - [CVE-2024-26031](https://insights.sbomify.com/CVE-2024-26031/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26030](https://insights.sbomify.com/CVE-2024-26030/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-2603](https://insights.sbomify.com/CVE-2024-2603/): Salon booking system <= 9.6.5 - Editor+ Stored XSS via Email Settings (medium 6.3) - [CVE-2024-26029](https://insights.sbomify.com/CVE-2024-26029/): Adobe Experience Manager | Improper Access Control (CWE-284) (high 7.5) - [CVE-2024-26028](https://insights.sbomify.com/CVE-2024-26028/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-26027](https://insights.sbomify.com/CVE-2024-26027/): Privilege escalation in Intel(R) Simics Package Manager software (medium 5.4) - [CVE-2024-26026](https://insights.sbomify.com/CVE-2024-26026/): BIG-IP Central Manager SQL Injection (high 7.5) - [CVE-2024-26025](https://insights.sbomify.com/CVE-2024-26025/): Misconfiguration in Intel(R) Advisor software (medium 5.4) - [CVE-2024-26024](https://insights.sbomify.com/CVE-2024-26024/): SUBNET Substation Server Reliance on Insufficiently Trustworthy Component (high 8.6) - [CVE-2024-26023](https://insights.sbomify.com/CVE-2024-26023/): Command injection in WCR-1166DS (medium 4.2) - [CVE-2024-26022](https://insights.sbomify.com/CVE-2024-26022/): Privilege escalation in Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC (high 8.5) - [CVE-2024-26021](https://insights.sbomify.com/CVE-2024-26021/): Information disclosure in Intel(R) AMT and Intel(R) Standard Manageability (medium 4.6) - [CVE-2024-26020](https://insights.sbomify.com/CVE-2024-26020/): Ankitects Anki arbitrary script execution vulnerability (critical 9.6) - [CVE-2024-2602](https://insights.sbomify.com/CVE-2024-2602/): Path traversal in FoxRTU Station (high 7.3) - [CVE-2024-26019](https://insights.sbomify.com/CVE-2024-26019/): Cross-site scripting in Ninja Forms (medium 5.4) - [CVE-2024-26018](https://insights.sbomify.com/CVE-2024-26018/): Cross-site scripting in TvRock (medium 6.1) - [CVE-2024-26017](https://insights.sbomify.com/CVE-2024-26017/): Privilege escalation in Intel(R) Rendering Toolkit software (medium 5.4) - [CVE-2024-26016](https://insights.sbomify.com/CVE-2024-26016/): Apache Superset: Improper authorization validation on dashboards and charts import (medium 4.3) - [CVE-2024-26015](https://insights.sbomify.com/CVE-2024-26015/): Security feature bypass in FortiOS (low 3.1) - [CVE-2024-26013](https://insights.sbomify.com/CVE-2024-26013/): Auth bypass in FortiManager (high 7.1) - [CVE-2024-26012](https://insights.sbomify.com/CVE-2024-26012/): Command injection in FortiAP (medium 6.3) - [CVE-2024-26011](https://insights.sbomify.com/CVE-2024-26011/): Auth bypass in FortiManager (medium 5.2) - [CVE-2024-26010](https://insights.sbomify.com/CVE-2024-26010/): Memory corruption in FortiOS (medium 6.7) - [CVE-2024-26009](https://insights.sbomify.com/CVE-2024-26009/): Auth bypass in FortiOS (high 7.9) - [CVE-2024-26008](https://insights.sbomify.com/CVE-2024-26008/): Denial of service in FortiOS (medium 5.0) - [CVE-2024-26007](https://insights.sbomify.com/CVE-2024-26007/): Denial of service in FortiOS (medium 5.0) - [CVE-2024-26006](https://insights.sbomify.com/CVE-2024-26006/): Cross-site scripting in FortiOS (medium 6.9) - [CVE-2024-26005](https://insights.sbomify.com/CVE-2024-26005/): PHOENIX CONTACT: Privilege gain through incomplete cleanup in CHARX Series (medium 4.8) - [CVE-2024-26004](https://insights.sbomify.com/CVE-2024-26004/): PHOENIX CONTACT: DoS of a control agent due to access of a uninitialized pointer in CHARX Series (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/418/