# Vulnerabilities published in 2024


- [CVE-2024-24797](https://insights.sbomify.com/CVE-2024-24797/): WordPress ERE Recently Viewed Plugin <= 1.3 is vulnerable to PHP Object Injection (critical 9.8)
- [CVE-2024-24796](https://insights.sbomify.com/CVE-2024-24796/): WordPress Event Manager for WooCommerce Plugin <= 4.1.1 is vulnerable to PHP Object Injection (high 8.2)
- [CVE-2024-24795](https://insights.sbomify.com/CVE-2024-24795/): Apache HTTP Server: HTTP Response Splitting in multiple modules (medium 6.3)
- [CVE-2024-24794](https://insights.sbomify.com/CVE-2024-24794/): Use after free in libdicom (high 8.1)
- [CVE-2024-24793](https://insights.sbomify.com/CVE-2024-24793/): Use after free in libdicom (high 8.1)
- [CVE-2024-24792](https://insights.sbomify.com/CVE-2024-24792/): Panic when parsing invalid palette-color images in golang.org/x/image (high 7.5)
- [CVE-2024-24791](https://insights.sbomify.com/CVE-2024-24791/): Denial of service due to improper 100-continue handling in net/http (high 7.5)
- [CVE-2024-24790](https://insights.sbomify.com/CVE-2024-24790/): Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip (critical 9.8)
- [CVE-2024-2479](https://insights.sbomify.com/CVE-2024-2479/): MHA Sistemas arMHAzena Cadastro Page cross site scripting (low 3.5)
- [CVE-2024-24789](https://insights.sbomify.com/CVE-2024-24789/): Mishandling of corrupt central directory record in archive/zip (medium 5.3)
- [CVE-2024-24788](https://insights.sbomify.com/CVE-2024-24788/): Malformed DNS message can cause infinite loop in net (medium 5.9)
- [CVE-2024-24787](https://insights.sbomify.com/CVE-2024-24787/): Arbitrary code execution during build on Darwin in cmd/go (medium 6.4)
- [CVE-2024-24786](https://insights.sbomify.com/CVE-2024-24786/): Infinite loop in JSON unmarshaling in google.golang.org/protobuf (high 7.5)
- [CVE-2024-24785](https://insights.sbomify.com/CVE-2024-24785/): Errors returned from JSON marshaling may break template escaping in html/template (medium 5.4)
- [CVE-2024-24784](https://insights.sbomify.com/CVE-2024-24784/): Comments in display names are incorrectly handled in net/mail (high 7.5)
- [CVE-2024-24783](https://insights.sbomify.com/CVE-2024-24783/): Verify panics on certificates with an unknown public key algorithm in crypto/x509 (medium 5.9)
- [CVE-2024-24782](https://insights.sbomify.com/CVE-2024-24782/): HIMA: Origin Validation Error in multiple products (medium 4.3)
- [CVE-2024-24781](https://insights.sbomify.com/CVE-2024-24781/): Hima: Uncontrolled Resource Consumption in multiple products (high 7.5)
- [CVE-2024-24780](https://insights.sbomify.com/CVE-2024-24780/): Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function (critical 9.8)
- [CVE-2024-2478](https://insights.sbomify.com/CVE-2024-2478/): BradWenqiang HR Background Management register selectAll sql injection (medium 6.3)
- [CVE-2024-24779](https://insights.sbomify.com/CVE-2024-24779/): Apache Superset: Improper data authorization when creating a new dataset (medium 5.0)
- [CVE-2024-24778](https://insights.sbomify.com/CVE-2024-24778/): Apache StreamPipes: Resources Permission Escalation (medium 6.5)
- [CVE-2024-24777](https://insights.sbomify.com/CVE-2024-24777/): Cross-site request forgery in WBR-6012 (high 8.8)
- [CVE-2024-24776](https://insights.sbomify.com/CVE-2024-24776/): Incorrect Authorization leads to Channel Member Count Leak (low 3.1)
- [CVE-2024-24775](https://insights.sbomify.com/CVE-2024-24775/): BIG-IP TMM vulnerability (high 7.5)
- [CVE-2024-24774](https://insights.sbomify.com/CVE-2024-24774/): Missing authorization allows users to access arbitrary security levels on Jira through webhooks (Jira Plugin) (low 3.4)
- [CVE-2024-24773](https://insights.sbomify.com/CVE-2024-24773/): Apache Superset: Improper validation of SQL statements allows for unauthorized access to data (medium 4.9)
- [CVE-2024-24772](https://insights.sbomify.com/CVE-2024-24772/): Apache Superset: Improper Neutralisation of custom SQL on embedded context (medium 4.3)
- [CVE-2024-24771](https://insights.sbomify.com/CVE-2024-24771/): Open Forms potential multi-factor authentication bypass (high 7.7)
- [CVE-2024-24770](https://insights.sbomify.com/CVE-2024-24770/): Username timing attack on recover password/MFA token in vantage6 (medium 5.3)
- [CVE-2024-2477](https://insights.sbomify.com/CVE-2024-2477/): wpDiscuz <= 7.6.15 - Authenticated (Author+) Stored Cross-Site Scripting via Uploaded Image Alternative Text (medium 6.4)
- [CVE-2024-24769](https://insights.sbomify.com/CVE-2024-24769/): Vantage6: No limit on emails sent for password/MFA reset (low 2.1)
- [CVE-2024-24768](https://insights.sbomify.com/CVE-2024-24768/): 1Panel set-cookie is missing the Secure keyword (medium 6.5)
- [CVE-2024-24767](https://insights.sbomify.com/CVE-2024-24767/): CasaOS Improper Restriction of Excessive Authentication Attempts vulnerability (critical 9.1)
- [CVE-2024-24766](https://insights.sbomify.com/CVE-2024-24766/): CasaOS Username Enumeration (medium 6.2)
- [CVE-2024-24765](https://insights.sbomify.com/CVE-2024-24765/): CasaOS-UserService allows unauthorized access to any file (high 7.5)
- [CVE-2024-24764](https://insights.sbomify.com/CVE-2024-24764/): October Open Redirect for Administrator Accounts (low 3.5)
- [CVE-2024-24763](https://insights.sbomify.com/CVE-2024-24763/): JumpServer Open Redirect Vulnerability (medium 4.3)
- [CVE-2024-24762](https://insights.sbomify.com/CVE-2024-24762/): python-multipart vulnerable to content-type header Regular expression Denial of Service (high 7.5)
- [CVE-2024-24761](https://insights.sbomify.com/CVE-2024-24761/): Galette public pages accessibility restriction (high 7.5)
- [CVE-2024-24760](https://insights.sbomify.com/CVE-2024-24760/): Mailcow Docker Container Exposure to Local Network (high 8.8)
- [CVE-2024-2476](https://insights.sbomify.com/CVE-2024-2476/): OceanWP <= 3.5.4 - Missing Authorization to Sensitive Information Exposure via Limited Local File Inclusion (medium 4.3)
- [CVE-2024-24759](https://insights.sbomify.com/CVE-2024-24759/): MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding (critical 9.3)
- [CVE-2024-24758](https://insights.sbomify.com/CVE-2024-24758/): Proxy-Authorization header not cleared on cross-origin redirect in fetch in Undici (low 3.9)
- [CVE-2024-24757](https://insights.sbomify.com/CVE-2024-24757/): open-irs .env Exposure (high 7.6)
- [CVE-2024-24756](https://insights.sbomify.com/CVE-2024-24756/): Crafatar path traversal vulnerability (high 7.5)
- [CVE-2024-24755](https://insights.sbomify.com/CVE-2024-24755/): discourse-group-membership-ip-block is exposing potentially sensitive custom fields (medium 4.3)
- [CVE-2024-24754](https://insights.sbomify.com/CVE-2024-24754/): Bref Body Parsing Inconsistency in Event-Driven Functions (low 3.7)
- [CVE-2024-24753](https://insights.sbomify.com/CVE-2024-24753/): Bref Multiple Value Headers Not Supported in ApiGatewayFormatV2 (medium 4.8)
- [CVE-2024-24752](https://insights.sbomify.com/CVE-2024-24752/): Bref Uploaded Files Not Deleted in Event-Driven Functions (medium 6.5)
- [CVE-2024-24751](https://insights.sbomify.com/CVE-2024-24751/): Broken Access Control in Backend Module in sf_event_mgt (medium 4.3)
- [CVE-2024-24750](https://insights.sbomify.com/CVE-2024-24750/): Backpressure request ignored in fetch() in Undici (medium 6.5)
- [CVE-2024-2475](https://insights.sbomify.com/CVE-2024-2475/): Media Library Assistant <= 3.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via mla_gallery Shortcode (medium 6.4)
- [CVE-2024-24749](https://insights.sbomify.com/CVE-2024-24749/): Classpath resource disclosure in GWC Web Resource API on Windows / Tomcat (high 7.5)
- [CVE-2024-24748](https://insights.sbomify.com/CVE-2024-24748/): Disclosure of the existence of secret subcategories in Discourse (medium 5.3)
- [CVE-2024-24747](https://insights.sbomify.com/CVE-2024-24747/): MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation (high 8.8)
- [CVE-2024-24746](https://insights.sbomify.com/CVE-2024-24746/): Apache NimBLE: Denial of service in NimBLE Bluetooth stack (high 7.5)
- [CVE-2024-24743](https://insights.sbomify.com/CVE-2024-24743/): XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures) (high 8.6)
- [CVE-2024-24742](https://insights.sbomify.com/CVE-2024-24742/): Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) (medium 4.1)
- [CVE-2024-24741](https://insights.sbomify.com/CVE-2024-24741/): Missing Authorization check in SAP Master Data Governance Material (medium 4.3)
- [CVE-2024-24740](https://insights.sbomify.com/CVE-2024-24740/): Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (SAP Kernel) (medium 5.3)
- [CVE-2024-2474](https://insights.sbomify.com/CVE-2024-2474/): Standout Color Boxes and Buttons <= 0.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2024-24739](https://insights.sbomify.com/CVE-2024-24739/): Missing authorization check in SAP BAM (Bank Account Management) (medium 6.3)
- [CVE-2024-24736](https://insights.sbomify.com/CVE-2024-24736/): Memory corruption in ypopsemail:ypops\! (high 7.5)
- [CVE-2024-24731](https://insights.sbomify.com/CVE-2024-24731/): Silicon Labs Gecko OS http_download Stack-based Buffer Overflow (high 7.5)
- [CVE-2024-2473](https://insights.sbomify.com/CVE-2024-2473/): WPS Hide Login <= 1.9.15.2 - Login Page Disclosure (medium 5.3)
- [CVE-2024-24725](https://insights.sbomify.com/CVE-2024-24725/): Deserialization in gibbonedu:gibbon (high 8.8)
- [CVE-2024-24724](https://insights.sbomify.com/CVE-2024-24724/): Code injection in gibbonedu:gibbon (critical 9.8)
- [CVE-2024-24722](https://insights.sbomify.com/CVE-2024-24722/): Privilege escalation in 12dsynergy:12dsynergy (critical 9.1)
- [CVE-2024-24721](https://insights.sbomify.com/CVE-2024-24721/): Auth bypass in innovaphone:innovaphone pbx (medium 6.5)
- [CVE-2024-24720](https://insights.sbomify.com/CVE-2024-24720/): Information disclosure in innovaphone:innovaphone pbx (medium 5.3)
- [CVE-2024-2472](https://insights.sbomify.com/CVE-2024-2472/): LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR (critical 9.1)
- [CVE-2024-24719](https://insights.sbomify.com/CVE-2024-24719/): WordPress Kikote plugin <= 1.8.9 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-24718](https://insights.sbomify.com/CVE-2024-24718/): WordPress PropertyHive plugin <= 2.0.6 - Missing Authorization to Non-Arbitrary Plugin Installation vulnerability (medium 4.3)
- [CVE-2024-24717](https://insights.sbomify.com/CVE-2024-24717/): WordPress Beds24 Online Booking Plugin <= 2.0.23 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2024-24716](https://insights.sbomify.com/CVE-2024-24716/): WordPress Awesome Support plugin <= 6.1.6 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2024-24715](https://insights.sbomify.com/CVE-2024-24715/): WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability (medium 6.5)
- [CVE-2024-24714](https://insights.sbomify.com/CVE-2024-24714/): WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload (high 7.2)
- [CVE-2024-24713](https://insights.sbomify.com/CVE-2024-24713/): WordPress Auto Listings Plugin <= 2.6.5 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2024-24712](https://insights.sbomify.com/CVE-2024-24712/): WordPress Heateor Social Login Plugin <= 1.1.30 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2024-24711](https://insights.sbomify.com/CVE-2024-24711/): WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-24710](https://insights.sbomify.com/CVE-2024-24710/): WordPress Feed Them Social plugin <= 4.2.0 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-2471](https://insights.sbomify.com/CVE-2024-2471/): FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting via Image Attachment Fields (medium 6.4)
- [CVE-2024-24709](https://insights.sbomify.com/CVE-2024-24709/): WordPress Shareaholic plugin <= 9.7.11 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2024-24708](https://insights.sbomify.com/CVE-2024-24708/): WordPress W3SPEEDSTER Plugin <= 7.19 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2024-24707](https://insights.sbomify.com/CVE-2024-24707/): WordPress Cwicly plugin <= 1.4.0.2 - Auth. Remote Code Execution (RCE) vulnerability (critical 9.9)
- [CVE-2024-24706](https://insights.sbomify.com/CVE-2024-24706/): WordPress WP-CFM Plugin <= 1.7.8 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2024-24705](https://insights.sbomify.com/CVE-2024-24705/): WordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2024-24704](https://insights.sbomify.com/CVE-2024-24704/): WordPress Load More Anything plugin <= 3.3.3 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2024-24703](https://insights.sbomify.com/CVE-2024-24703/): WordPress MultiVendorX plugin <= 4.0.25 - Broken Access Control vulnerability (high 8.6)
- [CVE-2024-24702](https://insights.sbomify.com/CVE-2024-24702/): WordPress Page Restrict Plugin <= 2.5.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2024-24701](https://insights.sbomify.com/CVE-2024-24701/): WordPress Setka Editor Plugin <= 2.1.20 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2024-24700](https://insights.sbomify.com/CVE-2024-24700/): WordPress WP Editor plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2024-2470](https://insights.sbomify.com/CVE-2024-2470/): Simple Ajax Chat < 20240412 - Admin+ Stored XSS (medium 5.4)
- [CVE-2024-24699](https://insights.sbomify.com/CVE-2024-24699/): Zoom Clients - Business Logic Error (medium 6.5)
- [CVE-2024-24698](https://insights.sbomify.com/CVE-2024-24698/): Zoom Clients - Improper Authentication (medium 4.9)
- [CVE-2024-24697](https://insights.sbomify.com/CVE-2024-24697/): Zoom Clients - Untrusted Search Path (high 7.2)
- [CVE-2024-24696](https://insights.sbomify.com/CVE-2024-24696/): Information disclosure in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows (medium 6.8)
- [CVE-2024-24695](https://insights.sbomify.com/CVE-2024-24695/): Information disclosure in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows (medium 6.8)
- [CVE-2024-24694](https://insights.sbomify.com/CVE-2024-24694/): Zoom Desktop Client for Windows - Improper Privilege Management (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/428/