# Vulnerabilities published in 2024


- [CVE-2024-21374](https://insights.sbomify.com/CVE-2024-21374/): Microsoft Teams for Android Information Disclosure Vulnerability (medium 5.0)
- [CVE-2024-21373](https://insights.sbomify.com/CVE-2024-21373/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21372](https://insights.sbomify.com/CVE-2024-21372/): Windows OLE Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21371](https://insights.sbomify.com/CVE-2024-21371/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21370](https://insights.sbomify.com/CVE-2024-21370/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2137](https://insights.sbomify.com/CVE-2024-2137/): Cross-site scripting in All-in-One Addons for Elementor – WidgetKit (medium 6.4)
- [CVE-2024-21369](https://insights.sbomify.com/CVE-2024-21369/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21368](https://insights.sbomify.com/CVE-2024-21368/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21367](https://insights.sbomify.com/CVE-2024-21367/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21366](https://insights.sbomify.com/CVE-2024-21366/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21365](https://insights.sbomify.com/CVE-2024-21365/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21364](https://insights.sbomify.com/CVE-2024-21364/): Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (critical 9.3)
- [CVE-2024-21363](https://insights.sbomify.com/CVE-2024-21363/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-21362](https://insights.sbomify.com/CVE-2024-21362/): Windows Kernel Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2024-21361](https://insights.sbomify.com/CVE-2024-21361/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21360](https://insights.sbomify.com/CVE-2024-21360/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2136](https://insights.sbomify.com/CVE-2024-2136/): Cross-site scripting in WPKoi Templates for Elementor (medium 6.4)
- [CVE-2024-21359](https://insights.sbomify.com/CVE-2024-21359/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21358](https://insights.sbomify.com/CVE-2024-21358/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21357](https://insights.sbomify.com/CVE-2024-21357/): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-21356](https://insights.sbomify.com/CVE-2024-21356/): Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-21355](https://insights.sbomify.com/CVE-2024-21355/): Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-21354](https://insights.sbomify.com/CVE-2024-21354/): Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21353](https://insights.sbomify.com/CVE-2024-21353/): Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21352](https://insights.sbomify.com/CVE-2024-21352/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21351](https://insights.sbomify.com/CVE-2024-21351/): Microsoft Windows SmartScreen Security Feature Bypass (high 7.6, exploited in the wild)
- [CVE-2024-21350](https://insights.sbomify.com/CVE-2024-21350/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-2135](https://insights.sbomify.com/CVE-2024-2135/): Bdtask Hospita AutoManager Hospital Activities Page form cross site scripting (low 2.4)
- [CVE-2024-21349](https://insights.sbomify.com/CVE-2024-21349/): Microsoft ActiveX Data Objects Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21348](https://insights.sbomify.com/CVE-2024-21348/): Internet Connection Sharing (ICS) Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21347](https://insights.sbomify.com/CVE-2024-21347/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-21346](https://insights.sbomify.com/CVE-2024-21346/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21345](https://insights.sbomify.com/CVE-2024-21345/): Windows Kernel Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2024-21344](https://insights.sbomify.com/CVE-2024-21344/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (medium 5.9)
- [CVE-2024-21343](https://insights.sbomify.com/CVE-2024-21343/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (medium 5.9)
- [CVE-2024-21342](https://insights.sbomify.com/CVE-2024-21342/): Windows DNS Client Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21341](https://insights.sbomify.com/CVE-2024-21341/): Windows Kernel Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2024-21340](https://insights.sbomify.com/CVE-2024-21340/): Windows Kernel Information Disclosure Vulnerability (medium 4.6)
- [CVE-2024-2134](https://insights.sbomify.com/CVE-2024-2134/): Bdtask Hospita AutoManager Investigation Report cross-site request forgery (medium 4.3)
- [CVE-2024-21339](https://insights.sbomify.com/CVE-2024-21339/): Windows USB Generic Parent Driver Remote Code Execution Vulnerability (medium 6.4)
- [CVE-2024-21338](https://insights.sbomify.com/CVE-2024-21338/): Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control (high 7.8, exploited in the wild)
- [CVE-2024-21337](https://insights.sbomify.com/CVE-2024-21337/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (medium 5.2)
- [CVE-2024-21336](https://insights.sbomify.com/CVE-2024-21336/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (low 2.5)
- [CVE-2024-21335](https://insights.sbomify.com/CVE-2024-21335/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21334](https://insights.sbomify.com/CVE-2024-21334/): Open Management Infrastructure (OMI) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2024-21333](https://insights.sbomify.com/CVE-2024-21333/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21332](https://insights.sbomify.com/CVE-2024-21332/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21331](https://insights.sbomify.com/CVE-2024-21331/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21330](https://insights.sbomify.com/CVE-2024-21330/): Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-2133](https://insights.sbomify.com/CVE-2024-2133/): Bdtask Isshue Multi Store eCommerce Shopping Cart Solution Manage Sale Page manage_invoice cross site scripting (low 2.4)
- [CVE-2024-21329](https://insights.sbomify.com/CVE-2024-21329/): Azure Connected Machine Agent Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2024-21328](https://insights.sbomify.com/CVE-2024-21328/): Dynamics 365 Sales Spoofing Vulnerability (high 7.6)
- [CVE-2024-21327](https://insights.sbomify.com/CVE-2024-21327/): Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability (high 7.6)
- [CVE-2024-21326](https://insights.sbomify.com/CVE-2024-21326/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2024-21325](https://insights.sbomify.com/CVE-2024-21325/): Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-21324](https://insights.sbomify.com/CVE-2024-21324/): Microsoft Defender for IoT Elevation of Privilege Vulnerability (high 7.2)
- [CVE-2024-21323](https://insights.sbomify.com/CVE-2024-21323/): Microsoft Defender for IoT Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21322](https://insights.sbomify.com/CVE-2024-21322/): Microsoft Defender for IoT Remote Code Execution Vulnerability (high 7.2)
- [CVE-2024-21320](https://insights.sbomify.com/CVE-2024-21320/): Windows Themes Spoofing Vulnerability (medium 6.5)
- [CVE-2024-2132](https://insights.sbomify.com/CVE-2024-2132/): Cross-site scripting in Ultimate Bootstrap Elements for Elementor (medium 6.4)
- [CVE-2024-21319](https://insights.sbomify.com/CVE-2024-21319/): Microsoft Identity Denial of service vulnerability (medium 6.8)
- [CVE-2024-21318](https://insights.sbomify.com/CVE-2024-21318/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21317](https://insights.sbomify.com/CVE-2024-21317/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21316](https://insights.sbomify.com/CVE-2024-21316/): Windows Server Key Distribution Service Security Feature Bypass (medium 6.1)
- [CVE-2024-21315](https://insights.sbomify.com/CVE-2024-21315/): Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21314](https://insights.sbomify.com/CVE-2024-21314/): Microsoft Message Queuing Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-21313](https://insights.sbomify.com/CVE-2024-21313/): Windows TCP/IP Information Disclosure Vulnerability (medium 5.3)
- [CVE-2024-21312](https://insights.sbomify.com/CVE-2024-21312/): .NET Framework Denial of Service Vulnerability (high 7.5)
- [CVE-2024-21311](https://insights.sbomify.com/CVE-2024-21311/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-21310](https://insights.sbomify.com/CVE-2024-21310/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-2131](https://insights.sbomify.com/CVE-2024-2131/): Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-21309](https://insights.sbomify.com/CVE-2024-21309/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-21308](https://insights.sbomify.com/CVE-2024-21308/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21307](https://insights.sbomify.com/CVE-2024-21307/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-21306](https://insights.sbomify.com/CVE-2024-21306/): Microsoft Bluetooth Driver Spoofing Vulnerability (medium 5.7)
- [CVE-2024-21305](https://insights.sbomify.com/CVE-2024-21305/): Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability (medium 4.4)
- [CVE-2024-21304](https://insights.sbomify.com/CVE-2024-21304/): Trusted Compute Base Elevation of Privilege Vulnerability (medium 4.1)
- [CVE-2024-21303](https://insights.sbomify.com/CVE-2024-21303/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-21302](https://insights.sbomify.com/CVE-2024-21302/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2024-2130](https://insights.sbomify.com/CVE-2024-2130/): CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-2129](https://insights.sbomify.com/CVE-2024-2129/): WPBITS Addons For Elementor Page Builder <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-21287](https://insights.sbomify.com/CVE-2024-21287/): Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization (high 7.5, exploited in the wild)
- [CVE-2024-21286](https://insights.sbomify.com/CVE-2024-21286/): Other in PeopleSoft Enterprise ELM Enterprise Learning Management (medium 5.4)
- [CVE-2024-21285](https://insights.sbomify.com/CVE-2024-21285/): Missing authorization in Oracle Banking Liquidity Management (high 7.1)
- [CVE-2024-21284](https://insights.sbomify.com/CVE-2024-21284/): Missing authorization in Oracle Banking Liquidity Management (high 7.1)
- [CVE-2024-21283](https://insights.sbomify.com/CVE-2024-21283/): Missing authorization in PeopleSoft Enterprise HCM Global Payroll Core (high 8.1)
- [CVE-2024-21282](https://insights.sbomify.com/CVE-2024-21282/): Missing authorization in Oracle Financials (high 8.1)
- [CVE-2024-21281](https://insights.sbomify.com/CVE-2024-21281/): Other in Oracle Banking Liquidity Management (medium 5.3)
- [CVE-2024-21280](https://insights.sbomify.com/CVE-2024-21280/): Missing authorization in Oracle Service Contracts (high 8.1)
- [CVE-2024-2128](https://insights.sbomify.com/CVE-2024-2128/): Cross-site scripting in EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more (medium 6.4)
- [CVE-2024-21279](https://insights.sbomify.com/CVE-2024-21279/): Missing authorization in Oracle Sourcing (high 8.1)
- [CVE-2024-21278](https://insights.sbomify.com/CVE-2024-21278/): Missing authorization in Oracle Contract Lifecycle Management for Public Sector (high 8.1)
- [CVE-2024-21277](https://insights.sbomify.com/CVE-2024-21277/): Missing authorization in Oracle MES for Process Manufacturing (high 8.1)
- [CVE-2024-21276](https://insights.sbomify.com/CVE-2024-21276/): Missing authorization in Oracle Work in Process (high 8.1)
- [CVE-2024-21275](https://insights.sbomify.com/CVE-2024-21275/): Missing authorization in Oracle Quoting (high 8.1)
- [CVE-2024-21274](https://insights.sbomify.com/CVE-2024-21274/): Denial of service in Oracle WebLogic Server (high 7.5)
- [CVE-2024-21273](https://insights.sbomify.com/CVE-2024-21273/): Information disclosure in Oracle VM VirtualBox (medium 6.0)
- [CVE-2024-21272](https://insights.sbomify.com/CVE-2024-21272/): MySQL Connector/Python connector takeover vulnerability (high 7.5)
- [CVE-2024-21271](https://insights.sbomify.com/CVE-2024-21271/): Missing authorization in Oracle Field Service (high 8.1)
- [CVE-2024-21270](https://insights.sbomify.com/CVE-2024-21270/): Missing authorization in Oracle Common Applications Calendar (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/453/