# Vulnerabilities published in 2024 - [CVE-2024-23254](https://insights.sbomify.com/CVE-2024-23254/): Information disclosure in Safari (medium 6.5) - [CVE-2024-23253](https://insights.sbomify.com/CVE-2024-23253/): Privilege escalation in macOS (high 7.5) - [CVE-2024-23251](https://insights.sbomify.com/CVE-2024-23251/): Auth bypass in iOS and iPadOS (medium 4.6) - [CVE-2024-23250](https://insights.sbomify.com/CVE-2024-23250/): Missing authorization in iOS and iPadOS (medium 5.5) - [CVE-2024-2325](https://insights.sbomify.com/CVE-2024-2325/): Link Library <= 7.6.6 - Reflected Cross-Site Scripting (medium 6.1) - [CVE-2024-23249](https://insights.sbomify.com/CVE-2024-23249/): Memory corruption in macOS (medium 6.2) - [CVE-2024-23248](https://insights.sbomify.com/CVE-2024-23248/): Memory corruption in macOS (medium 6.5) - [CVE-2024-23247](https://insights.sbomify.com/CVE-2024-23247/): Memory corruption in macOS (high 7.8) - [CVE-2024-23246](https://insights.sbomify.com/CVE-2024-23246/): Security feature bypass in iOS and iPadOS (high 8.1) - [CVE-2024-23245](https://insights.sbomify.com/CVE-2024-23245/): Security feature bypass in macOS (medium 5.4) - [CVE-2024-23244](https://insights.sbomify.com/CVE-2024-23244/): Privilege escalation in macOS (medium 6.7) - [CVE-2024-23243](https://insights.sbomify.com/CVE-2024-23243/): Information disclosure in iOS and iPadOS (medium 4.3) - [CVE-2024-23242](https://insights.sbomify.com/CVE-2024-23242/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2024-23241](https://insights.sbomify.com/CVE-2024-23241/): Information disclosure in iOS and iPadOS (medium 6.5) - [CVE-2024-23240](https://insights.sbomify.com/CVE-2024-23240/): Security feature bypass in iOS and iPadOS (low 2.4) - [CVE-2024-2324](https://insights.sbomify.com/CVE-2024-2324/): FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting (medium 4.4) - [CVE-2024-23239](https://insights.sbomify.com/CVE-2024-23239/): Race condition in iOS and iPadOS (medium 5.9) - [CVE-2024-23238](https://insights.sbomify.com/CVE-2024-23238/): Missing authorization in macOS (high 7.1) - [CVE-2024-23237](https://insights.sbomify.com/CVE-2024-23237/): Memory corruption in macOS (medium 5.5) - [CVE-2024-23236](https://insights.sbomify.com/CVE-2024-23236/): Information disclosure in macOS (medium 5.5) - [CVE-2024-23235](https://insights.sbomify.com/CVE-2024-23235/): Race condition in iOS and iPadOS (high 8.1) - [CVE-2024-23234](https://insights.sbomify.com/CVE-2024-23234/): Memory corruption in macOS (high 7.8) - [CVE-2024-23233](https://insights.sbomify.com/CVE-2024-23233/): Privilege escalation in macOS (high 7.8) - [CVE-2024-23232](https://insights.sbomify.com/CVE-2024-23232/): Information disclosure in macOS (low 3.3) - [CVE-2024-23231](https://insights.sbomify.com/CVE-2024-23231/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2024-23230](https://insights.sbomify.com/CVE-2024-23230/): Missing authorization in macOS (medium 5.5) - [CVE-2024-2323](https://insights.sbomify.com/CVE-2024-2323/): Password Brute Force via Password History Validation in Multiple WSO2 Products Allows User Account Discovery (medium 4.8) - [CVE-2024-23229](https://insights.sbomify.com/CVE-2024-23229/): Information disclosure in macOS (medium 5.5) - [CVE-2024-23228](https://insights.sbomify.com/CVE-2024-23228/): Information disclosure in iOS and iPadOS (medium 4.3) - [CVE-2024-23227](https://insights.sbomify.com/CVE-2024-23227/): Information disclosure in macOS (medium 6.2) - [CVE-2024-23226](https://insights.sbomify.com/CVE-2024-23226/): Memory corruption in iOS and iPadOS (high 8.8) - [CVE-2024-23225](https://insights.sbomify.com/CVE-2024-23225/): Apple Multiple Products Memory Corruption (high 7.8, exploited in the wild) - [CVE-2024-23224](https://insights.sbomify.com/CVE-2024-23224/): Information disclosure in macOS (medium 5.5) - [CVE-2024-23223](https://insights.sbomify.com/CVE-2024-23223/): Information disclosure in iOS and iPadOS (medium 6.2) - [CVE-2024-23222](https://insights.sbomify.com/CVE-2024-23222/): Apple Multiple Products WebKit Type Confusion (high 8.8, exploited in the wild) - [CVE-2024-23220](https://insights.sbomify.com/CVE-2024-23220/): Information disclosure in iOS and iPadOS (medium 4.0) - [CVE-2024-2322](https://insights.sbomify.com/CVE-2024-2322/): WooCommerce Cart Abandonment Recovery < 1.2.27 - Templates/Abandoned Orders Deletion via CSRF (medium 6.8) - [CVE-2024-23219](https://insights.sbomify.com/CVE-2024-23219/): Auth bypass in iOS and iPadOS (medium 6.2) - [CVE-2024-23218](https://insights.sbomify.com/CVE-2024-23218/): Weak cryptography in iOS and iPadOS (medium 5.9) - [CVE-2024-23217](https://insights.sbomify.com/CVE-2024-23217/): Security feature bypass in iOS and iPadOS (low 3.3) - [CVE-2024-23216](https://insights.sbomify.com/CVE-2024-23216/): Path traversal in macOS (medium 6.7) - [CVE-2024-23215](https://insights.sbomify.com/CVE-2024-23215/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2024-23214](https://insights.sbomify.com/CVE-2024-23214/): Memory corruption in iOS and iPadOS (high 8.8) - [CVE-2024-23213](https://insights.sbomify.com/CVE-2024-23213/): Memory corruption in Safari (high 8.8) - [CVE-2024-23212](https://insights.sbomify.com/CVE-2024-23212/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2024-23211](https://insights.sbomify.com/CVE-2024-23211/): Information disclosure in Safari (low 3.3) - [CVE-2024-23210](https://insights.sbomify.com/CVE-2024-23210/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2024-2321](https://insights.sbomify.com/CVE-2024-2321/): Incorrect Authorization in Multiple WSO2 Products Allows API Access via Refresh Token (medium 5.6) - [CVE-2024-23209](https://insights.sbomify.com/CVE-2024-23209/): Memory corruption in macOS (high 8.8) - [CVE-2024-23208](https://insights.sbomify.com/CVE-2024-23208/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2024-23207](https://insights.sbomify.com/CVE-2024-23207/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2024-23206](https://insights.sbomify.com/CVE-2024-23206/): Information disclosure in Safari (medium 6.5) - [CVE-2024-23205](https://insights.sbomify.com/CVE-2024-23205/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2024-23204](https://insights.sbomify.com/CVE-2024-23204/): Security feature bypass in iOS and iPadOS (high 7.5) - [CVE-2024-23203](https://insights.sbomify.com/CVE-2024-23203/): Security feature bypass in iOS and iPadOS (high 7.5) - [CVE-2024-23201](https://insights.sbomify.com/CVE-2024-23201/): Misconfiguration in iOS and iPadOS (medium 6.2) - [CVE-2024-23198](https://insights.sbomify.com/CVE-2024-23198/): Denial of service in Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products (medium 6.8) - [CVE-2024-23196](https://insights.sbomify.com/CVE-2024-23196/): Race condition vulnerability in Linux kernel sound/hda snd_hdac_regmap_sync (medium 5.3) - [CVE-2024-23194](https://insights.sbomify.com/CVE-2024-23194/): Other in Command Centre (low 3.3) - [CVE-2024-23193](https://insights.sbomify.com/CVE-2024-23193/): Information disclosure in OX App Suite (medium 5.3) - [CVE-2024-23192](https://insights.sbomify.com/CVE-2024-23192/): Cross-site scripting in OX App Suite (medium 6.1) - [CVE-2024-23191](https://insights.sbomify.com/CVE-2024-23191/): Cross-site scripting in OX App Suite (medium 5.4) - [CVE-2024-23190](https://insights.sbomify.com/CVE-2024-23190/): Cross-site scripting in OX App Suite (medium 5.4) - [CVE-2024-2319](https://insights.sbomify.com/CVE-2024-2319/): Cross-Site Scripting vulnerability in Django MarkdownX (medium 5.4) - [CVE-2024-23189](https://insights.sbomify.com/CVE-2024-23189/): Cross-site scripting in OX App Suite (medium 5.4) - [CVE-2024-23188](https://insights.sbomify.com/CVE-2024-23188/): Cross-site scripting in OX App Suite (medium 6.5) - [CVE-2024-23187](https://insights.sbomify.com/CVE-2024-23187/): Cross-site scripting in OX App Suite (medium 6.5) - [CVE-2024-23186](https://insights.sbomify.com/CVE-2024-23186/): Cross-site scripting in OX App Suite (medium 6.5) - [CVE-2024-23185](https://insights.sbomify.com/CVE-2024-23185/): Denial of service in OX Dovecot Pro (high 7.5) - [CVE-2024-23184](https://insights.sbomify.com/CVE-2024-23184/): Denial of service in OX Dovecot Pro (medium 5.0) - [CVE-2024-23183](https://insights.sbomify.com/CVE-2024-23183/): Cross-site scripting in a-blog cms (medium 5.4) - [CVE-2024-23182](https://insights.sbomify.com/CVE-2024-23182/): Path traversal in a-blog cms (high 8.1) - [CVE-2024-23181](https://insights.sbomify.com/CVE-2024-23181/): Cross-site scripting in a-blog cms (medium 6.1) - [CVE-2024-23180](https://insights.sbomify.com/CVE-2024-23180/): File upload in a-blog cms (high 8.8) - [CVE-2024-2318](https://insights.sbomify.com/CVE-2024-2318/): ZKTeco ZKBio Media Service Port 9999 download path traversal (medium 5.3) - [CVE-2024-23179](https://insights.sbomify.com/CVE-2024-23179/): Cross-site scripting in mediawiki:mediawiki (medium 6.1) - [CVE-2024-23178](https://insights.sbomify.com/CVE-2024-23178/): Cross-site scripting in mediawiki:mediawiki (medium 5.4) - [CVE-2024-23177](https://insights.sbomify.com/CVE-2024-23177/): Cross-site scripting in mediawiki:mediawiki (medium 6.1) - [CVE-2024-23176](https://insights.sbomify.com/CVE-2024-23176/): Cross-site scripting in MassMessage (medium 5.4) - [CVE-2024-23174](https://insights.sbomify.com/CVE-2024-23174/): Cross-site scripting in mediawiki:mediawiki (medium 5.4) - [CVE-2024-23173](https://insights.sbomify.com/CVE-2024-23173/): MediaWiki Cargo Extension Cross-site Scripting vulnerability (medium 6.1) - [CVE-2024-23172](https://insights.sbomify.com/CVE-2024-23172/): Cross-site scripting in mediawiki:mediawiki (medium 5.4) - [CVE-2024-23171](https://insights.sbomify.com/CVE-2024-23171/): Cross-site scripting in mediawiki:mediawiki (medium 5.4) - [CVE-2024-23170](https://insights.sbomify.com/CVE-2024-23170/): Weak cryptography in arm:mbed tls (medium 5.5) - [CVE-2024-2317](https://insights.sbomify.com/CVE-2024-2317/): Bdtask Hospital AutoManager Prescription Page improper authorization (low 3.8) - [CVE-2024-23169](https://insights.sbomify.com/CVE-2024-23169/): The web interface in RSA NetWitness 11.7.2.0 allows Cross-Site Scripting (XSS) via the Where textbox on the Reports screen during new rule creation. (medium 4.6) - [CVE-2024-23168](https://insights.sbomify.com/CVE-2024-23168/): Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting i (critical 9.8) - [CVE-2024-2316](https://insights.sbomify.com/CVE-2024-2316/): Bdtask Hospital AutoManager Update Bill Page cross-site request forgery (medium 4.3) - [CVE-2024-23159](https://insights.sbomify.com/CVE-2024-23159/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23158](https://insights.sbomify.com/CVE-2024-23158/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23157](https://insights.sbomify.com/CVE-2024-23157/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23156](https://insights.sbomify.com/CVE-2024-23156/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23155](https://insights.sbomify.com/CVE-2024-23155/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23154](https://insights.sbomify.com/CVE-2024-23154/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23153](https://insights.sbomify.com/CVE-2024-23153/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23152](https://insights.sbomify.com/CVE-2024-23152/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23151](https://insights.sbomify.com/CVE-2024-23151/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-23150](https://insights.sbomify.com/CVE-2024-23150/): Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products (high 7.8) - [CVE-2024-2315](https://insights.sbomify.com/CVE-2024-2315/): SMM arbitrary code execution in Overclock (medium 6.8) - [CVE-2024-23149](https://insights.sbomify.com/CVE-2024-23149/): Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/439/