# Vulnerabilities published in 2024


- [CVE-2024-22058](https://insights.sbomify.com/CVE-2024-22058/): Memory corruption in EPM (high 7.8)
- [CVE-2024-22054](https://insights.sbomify.com/CVE-2024-22054/): Denial of service in UniFi Access Points (high 7.5)
- [CVE-2024-22053](https://insights.sbomify.com/CVE-2024-22053/): Memory corruption in Connect Secure (high 8.2)
- [CVE-2024-22052](https://insights.sbomify.com/CVE-2024-22052/): Null dereference in Connect Secure (high 7.5)
- [CVE-2024-22051](https://insights.sbomify.com/CVE-2024-22051/): CommonMarker Integer Overflow Vulnerability (critical 9.8)
- [CVE-2024-22050](https://insights.sbomify.com/CVE-2024-22050/): Iodine Static File Server Path Traversal Vulnerability (high 7.5)
- [CVE-2024-22049](https://insights.sbomify.com/CVE-2024-22049/): httparty Multipart/Form-Data Request Tampering Vulnerability (medium 5.3)
- [CVE-2024-22048](https://insights.sbomify.com/CVE-2024-22048/): govuk_tech_docs XSS Vulnerability (medium 6.1)
- [CVE-2024-22047](https://insights.sbomify.com/CVE-2024-22047/): Audited Log Integrity Errors Due to Race Condition (low 3.1)
- [CVE-2024-22045](https://insights.sbomify.com/CVE-2024-22045/): Information disclosure in SINEMA Remote Connect Client (high 7.6)
- [CVE-2024-22044](https://insights.sbomify.com/CVE-2024-22044/): Denial of service in SENTRON 3KC ATC6 Expansion Module Ethernet (high 7.5)
- [CVE-2024-22043](https://insights.sbomify.com/CVE-2024-22043/): Null dereference in Parasolid V35.0 (low 3.3)
- [CVE-2024-22042](https://insights.sbomify.com/CVE-2024-22042/): Privilege escalation in Unicam FX (high 7.8)
- [CVE-2024-22041](https://insights.sbomify.com/CVE-2024-22041/): Memory corruption in Cerberus PRO EN Engineering Tool (high 7.5)
- [CVE-2024-22040](https://insights.sbomify.com/CVE-2024-22040/): Memory corruption in Cerberus PRO EN Engineering Tool (high 7.5)
- [CVE-2024-2204](https://insights.sbomify.com/CVE-2024-2204/): Zemana AntiLogger v2.74.204.664 - Denial of Service (DoS) (medium 5.5)
- [CVE-2024-22039](https://insights.sbomify.com/CVE-2024-22039/): Memory corruption in Cerberus PRO EN Engineering Tool (critical 10.0)
- [CVE-2024-22038](https://insights.sbomify.com/CVE-2024-22038/): DoS attacks, information leaks etc. with crafted Git repositories in obs-scm-bridge (medium 6.8)
- [CVE-2024-22037](https://insights.sbomify.com/CVE-2024-22037/): Database password leaked by systemd uyuni-server-attestation service (medium 5.7)
- [CVE-2024-22036](https://insights.sbomify.com/CVE-2024-22036/): Rancher Remote Code Execution via Cluster/Node Drivers (critical 9.1)
- [CVE-2024-22034](https://insights.sbomify.com/CVE-2024-22034/): Crafted projects can overwrite special files in the .osc config directory (medium 5.5)
- [CVE-2024-22033](https://insights.sbomify.com/CVE-2024-22033/): obs-service-download_url is vulnerable to argument injection (medium 5.1)
- [CVE-2024-22032](https://insights.sbomify.com/CVE-2024-22032/): Rancher's RKE1 Encryption Config kept in plain-text within cluster AppliedSpec (high 7.1)
- [CVE-2024-22031](https://insights.sbomify.com/CVE-2024-22031/): Rancher users who can create Projects can gain access to arbitrary projects (high 8.5)
- [CVE-2024-22030](https://insights.sbomify.com/CVE-2024-22030/): Rancher agents can be hijacked by taking over the Rancher Server URL (high 8.0)
- [CVE-2024-2203](https://insights.sbomify.com/CVE-2024-2203/): The Plus Addons for Elementor <= 5.4.1 - Authenticated (Contributor+) Local File Inclusion via Clients Widget (medium 6.4)
- [CVE-2024-22029](https://insights.sbomify.com/CVE-2024-22029/): tomcat packaging allows for escalation to root from tomcat user (high 7.8)
- [CVE-2024-22028](https://insights.sbomify.com/CVE-2024-22028/): Information disclosure in 3R-TMC01 (medium 4.6)
- [CVE-2024-22027](https://insights.sbomify.com/CVE-2024-22027/): Denial of service in WordPress Quiz Maker Plugin (medium 6.5)
- [CVE-2024-22026](https://insights.sbomify.com/CVE-2024-22026/): Privilege escalation in EPMM (medium 6.7)
- [CVE-2024-22025](https://insights.sbomify.com/CVE-2024-22025/): Denial of service in Node (medium 6.5)
- [CVE-2024-22024](https://insights.sbomify.com/CVE-2024-22024/): XML external entity in ICS (high 8.3)
- [CVE-2024-22023](https://insights.sbomify.com/CVE-2024-22023/): XML external entity in Connect Secure (medium 5.3)
- [CVE-2024-22022](https://insights.sbomify.com/CVE-2024-22022/): Information disclosure in Availability Orchestrator (high 8.8)
- [CVE-2024-22021](https://insights.sbomify.com/CVE-2024-22021/): Missing authorization in Availability Orchestrator (medium 6.5)
- [CVE-2024-22020](https://insights.sbomify.com/CVE-2024-22020/): Code injection in Node (medium 6.5)
- [CVE-2024-2202](https://insights.sbomify.com/CVE-2024-2202/): Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget (medium 6.4)
- [CVE-2024-22019](https://insights.sbomify.com/CVE-2024-22019/): Denial of service in Node (high 7.5)
- [CVE-2024-22018](https://insights.sbomify.com/CVE-2024-22018/): Security feature bypass in Node (low 2.9)
- [CVE-2024-22017](https://insights.sbomify.com/CVE-2024-22017/): Privilege escalation in Node (high 7.3)
- [CVE-2024-22016](https://insights.sbomify.com/CVE-2024-22016/): Incorrect Permission Assignment for Critical Resource in Rapid SCADA (high 7.8)
- [CVE-2024-22015](https://insights.sbomify.com/CVE-2024-22015/): Denial of service in Intel(R) DLB driver software (medium 6.5)
- [CVE-2024-22014](https://insights.sbomify.com/CVE-2024-22014/): Privilege escalation in 360totalsecurity:360 total security (high 8.8)
- [CVE-2024-22013](https://insights.sbomify.com/CVE-2024-22013/): Security feature bypass in Nest Wifi Pro (medium 5.3)
- [CVE-2024-22012](https://insights.sbomify.com/CVE-2024-22012/): Memory corruption in Android (high 7.8)
- [CVE-2024-22011](https://insights.sbomify.com/CVE-2024-22011/): Memory corruption in Android (high 7.5)
- [CVE-2024-22010](https://insights.sbomify.com/CVE-2024-22010/): Memory corruption in Android (medium 5.5)
- [CVE-2024-2201](https://insights.sbomify.com/CVE-2024-2201/): CVE-2024-2201 (medium 4.7)
- [CVE-2024-22009](https://insights.sbomify.com/CVE-2024-22009/): Memory corruption in Android (high 7.1)
- [CVE-2024-22008](https://insights.sbomify.com/CVE-2024-22008/): Memory corruption in Android (high 7.8)
- [CVE-2024-22007](https://insights.sbomify.com/CVE-2024-22007/): Memory corruption in Android (medium 6.2)
- [CVE-2024-22006](https://insights.sbomify.com/CVE-2024-22006/): Memory corruption in Android (medium 5.3)
- [CVE-2024-22005](https://insights.sbomify.com/CVE-2024-22005/): Auth bypass in Android (high 8.4)
- [CVE-2024-22004](https://insights.sbomify.com/CVE-2024-22004/): Unchecked length in Trusted Application on Google Nest Wifi Pro, leading to out of bounds read (critical 10.0)
- [CVE-2024-22002](https://insights.sbomify.com/CVE-2024-22002/): CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory. (high 7.8)
- [CVE-2024-2200](https://insights.sbomify.com/CVE-2024-2200/): Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject (medium 6.1)
- [CVE-2024-21994](https://insights.sbomify.com/CVE-2024-21994/): CVE-2024-21994 Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (medium 4.3)
- [CVE-2024-21993](https://insights.sbomify.com/CVE-2024-21993/): Information Disclosure Vulnerability in SnapCenter (medium 5.7)
- [CVE-2024-21990](https://insights.sbomify.com/CVE-2024-21990/): Default Privileged Account Credentials Vulnerability in ONTAP Select Deploy administration utility (medium 5.4)
- [CVE-2024-2199](https://insights.sbomify.com/CVE-2024-2199/): 389-ds-base: malformed userpassword may cause crash at do_modify in slapd/modify.c (medium 5.7)
- [CVE-2024-21989](https://insights.sbomify.com/CVE-2024-21989/): Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility (high 8.1)
- [CVE-2024-21988](https://insights.sbomify.com/CVE-2024-21988/): CVE-2024-21988 SSH Cryptographic Implementation Vulnerability in StorageGRID (formerly StorageGRID Webscale) (medium 5.3)
- [CVE-2024-21987](https://insights.sbomify.com/CVE-2024-21987/): Improper Authorization Vulnerability in SnapCenter (medium 5.4)
- [CVE-2024-21985](https://insights.sbomify.com/CVE-2024-21985/): Privilege Escalation Vulnerability in ONTAP 9 (high 7.6)
- [CVE-2024-21984](https://insights.sbomify.com/CVE-2024-21984/): Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale) (medium 5.9)
- [CVE-2024-21983](https://insights.sbomify.com/CVE-2024-21983/): Denial of Service Vulnerability in StorageGRID (formerly StorageGRID Webscale) (medium 6.5)
- [CVE-2024-21982](https://insights.sbomify.com/CVE-2024-21982/): CVE-2024-21982 Information Disclosure Vulnerability in ONTAP 9 (medium 4.8)
- [CVE-2024-21981](https://insights.sbomify.com/CVE-2024-21981/): Weak cryptography in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (medium 5.7)
- [CVE-2024-21980](https://insights.sbomify.com/CVE-2024-21980/): Memory corruption in 3rd Gen AMD EPYC™ Processors (high 7.9)
- [CVE-2024-2198](https://insights.sbomify.com/CVE-2024-2198/): Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address (medium 6.1)
- [CVE-2024-21979](https://insights.sbomify.com/CVE-2024-21979/): Memory corruption in AMD Software: Adrenalin Edition (medium 5.3)
- [CVE-2024-21978](https://insights.sbomify.com/CVE-2024-21978/): Other in 3rd Gen AMD EPYC™ Processors (medium 6.0)
- [CVE-2024-21977](https://insights.sbomify.com/CVE-2024-21977/): Other in AMD EPYC™ 7003 Series Processors (low 3.2)
- [CVE-2024-21976](https://insights.sbomify.com/CVE-2024-21976/): Memory corruption in AMD Ryzen™ AI Software (high 8.8)
- [CVE-2024-21975](https://insights.sbomify.com/CVE-2024-21975/): Memory corruption in AMD Ryzen™ AI Software (high 8.8)
- [CVE-2024-21974](https://insights.sbomify.com/CVE-2024-21974/): Memory corruption in AMD Ryzen™ AI Software (high 8.8)
- [CVE-2024-21972](https://insights.sbomify.com/CVE-2024-21972/): Memory corruption in AMD Software: Adrenalin Edition (medium 5.3)
- [CVE-2024-21971](https://insights.sbomify.com/CVE-2024-21971/): Denial of service in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (medium 5.5)
- [CVE-2024-21970](https://insights.sbomify.com/CVE-2024-21970/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (medium 4.4)
- [CVE-2024-2197](https://insights.sbomify.com/CVE-2024-2197/): Chirp Systems Chirp Access Use of Hard-coded Password (low 2.3)
- [CVE-2024-21966](https://insights.sbomify.com/CVE-2024-21966/): Privilege escalation in AMD Ryzen™ Master Utility (high 7.3)
- [CVE-2024-21962](https://insights.sbomify.com/CVE-2024-21962/): Memory corruption in AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics (high 8.6)
- [CVE-2024-21961](https://insights.sbomify.com/CVE-2024-21961/): Memory corruption in AMD EPYC™ 7002 Series Processors (medium 6.0)
- [CVE-2024-21960](https://insights.sbomify.com/CVE-2024-21960/): Misconfiguration in AMD Optimizing CPU Libraries (AOCL) (high 7.3)
- [CVE-2024-2196](https://insights.sbomify.com/CVE-2024-2196/): CSRF Vulnerability in aimhubio/aim (high 8.8)
- [CVE-2024-21958](https://insights.sbomify.com/CVE-2024-21958/): Misconfiguration in AMD Provisioning Console (APC) Software (high 7.3)
- [CVE-2024-21957](https://insights.sbomify.com/CVE-2024-21957/): Misconfiguration in AMD Management Console (high 7.3)
- [CVE-2024-21953](https://insights.sbomify.com/CVE-2024-21953/): Other in AMD EPYC™ 8004 Series Processors (medium 5.9)
- [CVE-2024-21950](https://insights.sbomify.com/CVE-2024-21950/): Memory corruption in AMD Instinct™ MI300A (low 1.8)
- [CVE-2024-2195](https://insights.sbomify.com/CVE-2024-2195/): Remote Code Execution in aimhubio/aim (critical 9.8)
- [CVE-2024-21949](https://insights.sbomify.com/CVE-2024-21949/): Memory corruption in AMD Ryzen™ AI Software (medium 5.5)
- [CVE-2024-21947](https://insights.sbomify.com/CVE-2024-21947/): Memory corruption in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics (high 7.5)
- [CVE-2024-21946](https://insights.sbomify.com/CVE-2024-21946/): Misconfiguration in AMD Ryzen Master Utility for Overclocking Control (high 7.3)
- [CVE-2024-21945](https://insights.sbomify.com/CVE-2024-21945/): Misconfiguration in AMD Ryzen™ Master Monitoring SDK (high 7.3)
- [CVE-2024-21944](https://insights.sbomify.com/CVE-2024-21944/): Other in AMD EPYC™ 7003 Series Processors (medium 5.3)
- [CVE-2024-2194](https://insights.sbomify.com/CVE-2024-2194/): WP Statistics <= 14.5 - Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2024-21939](https://insights.sbomify.com/CVE-2024-21939/): Misconfiguration in AMD Cloud Manageability Service Software (high 7.3)
- [CVE-2024-21938](https://insights.sbomify.com/CVE-2024-21938/): Misconfiguration in AMD Management Plug-In for SCCM (high 7.3)
- [CVE-2024-21937](https://insights.sbomify.com/CVE-2024-21937/): Misconfiguration in AMD Software: Adrenalin Edition (high 7.3)
- [CVE-2024-21935](https://insights.sbomify.com/CVE-2024-21935/): Path traversal in AMD Instinct™ MI300X (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/447/