# Vulnerabilities published in 2024


- [CVE-2024-2127](https://insights.sbomify.com/CVE-2024-2127/): Cross-site scripting in Page Builder: Pagelayer – Drag and Drop website builder (medium 6.4)
- [CVE-2024-21269](https://insights.sbomify.com/CVE-2024-21269/): Missing authorization in Oracle Incentive Compensation (high 8.1)
- [CVE-2024-21268](https://insights.sbomify.com/CVE-2024-21268/): Missing authorization in Oracle Applications Manager (high 8.1)
- [CVE-2024-21267](https://insights.sbomify.com/CVE-2024-21267/): Missing authorization in Oracle Cost Management (high 8.1)
- [CVE-2024-21266](https://insights.sbomify.com/CVE-2024-21266/): Missing authorization in Oracle Advanced Pricing (high 8.1)
- [CVE-2024-21265](https://insights.sbomify.com/CVE-2024-21265/): Missing authorization in Oracle Site Hub (high 8.1)
- [CVE-2024-21264](https://insights.sbomify.com/CVE-2024-21264/): Other in PeopleSoft Enterprise CC Common Application Objects (medium 5.4)
- [CVE-2024-21263](https://insights.sbomify.com/CVE-2024-21263/): Other in Oracle VM VirtualBox (medium 6.1)
- [CVE-2024-21262](https://insights.sbomify.com/CVE-2024-21262/): Missing authorization in MySQL Connectors (medium 6.5)
- [CVE-2024-21261](https://insights.sbomify.com/CVE-2024-21261/): Other in Oracle Application Express (medium 4.9)
- [CVE-2024-21260](https://insights.sbomify.com/CVE-2024-21260/): Denial of service in Oracle WebLogic Server (high 7.5)
- [CVE-2024-2126](https://insights.sbomify.com/CVE-2024-2126/): Cross-site scripting in Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More (medium 6.4)
- [CVE-2024-21259](https://insights.sbomify.com/CVE-2024-21259/): Privilege escalation in Oracle VM VirtualBox (high 7.5)
- [CVE-2024-21258](https://insights.sbomify.com/CVE-2024-21258/): Information disclosure in Oracle Installed Base (medium 5.3)
- [CVE-2024-21257](https://insights.sbomify.com/CVE-2024-21257/): Information disclosure in Oracle Hyperion BI+ (low 3.0)
- [CVE-2024-21255](https://insights.sbomify.com/CVE-2024-21255/): XML external entity in PeopleSoft Enterprise PeopleTools (high 8.8)
- [CVE-2024-21254](https://insights.sbomify.com/CVE-2024-21254/): Missing authorization in Oracle BI Publisher (high 8.8)
- [CVE-2024-21253](https://insights.sbomify.com/CVE-2024-21253/): Denial of service in Oracle VM VirtualBox (low 2.3)
- [CVE-2024-21252](https://insights.sbomify.com/CVE-2024-21252/): Missing authorization in Oracle Product Hub (high 8.1)
- [CVE-2024-21251](https://insights.sbomify.com/CVE-2024-21251/): Other in Oracle Database Server (low 3.1)
- [CVE-2024-21250](https://insights.sbomify.com/CVE-2024-21250/): Missing authorization in Oracle Process Manufacturing Product Development (high 8.1)
- [CVE-2024-2125](https://insights.sbomify.com/CVE-2024-2125/): EnvíaloSimple: Email Marketing y Newsletters <= 2.3 - Cross-Site Request Forgery to Arbitrary File Upload (high 8.8)
- [CVE-2024-21249](https://insights.sbomify.com/CVE-2024-21249/): Missing authorization in PeopleSoft Enterprise FIN Expenses (medium 4.3)
- [CVE-2024-21248](https://insights.sbomify.com/CVE-2024-21248/): Other in Oracle VM VirtualBox (medium 5.3)
- [CVE-2024-21247](https://insights.sbomify.com/CVE-2024-21247/): Other in MySQL Client (low 3.8)
- [CVE-2024-21246](https://insights.sbomify.com/CVE-2024-21246/): Missing authorization in Oracle Service Bus (high 7.5)
- [CVE-2024-21245](https://insights.sbomify.com/CVE-2024-21245/): Other in JD Edwards EnterpriseOne Tools (medium 5.4)
- [CVE-2024-21244](https://insights.sbomify.com/CVE-2024-21244/): Information disclosure in MySQL Server (low 2.2)
- [CVE-2024-21243](https://insights.sbomify.com/CVE-2024-21243/): Information disclosure in MySQL Server (low 2.2)
- [CVE-2024-21242](https://insights.sbomify.com/CVE-2024-21242/): Denial of service in Oracle Database Server (low 3.5)
- [CVE-2024-21241](https://insights.sbomify.com/CVE-2024-21241/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2124](https://insights.sbomify.com/CVE-2024-2124/): Cross-site scripting in Translate WordPress with Weglot – Multilingual AI Translation (medium 6.4)
- [CVE-2024-21239](https://insights.sbomify.com/CVE-2024-21239/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21238](https://insights.sbomify.com/CVE-2024-21238/): Denial of service in MySQL Cluster (medium 5.3)
- [CVE-2024-21237](https://insights.sbomify.com/CVE-2024-21237/): Denial of service in MySQL Server (low 2.2)
- [CVE-2024-21236](https://insights.sbomify.com/CVE-2024-21236/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21235](https://insights.sbomify.com/CVE-2024-21235/): Other in Oracle Java SE (medium 4.8)
- [CVE-2024-21234](https://insights.sbomify.com/CVE-2024-21234/): Missing authorization in Oracle WebLogic Server (high 7.5)
- [CVE-2024-21233](https://insights.sbomify.com/CVE-2024-21233/): Other in Oracle Database Server (medium 4.3)
- [CVE-2024-21232](https://insights.sbomify.com/CVE-2024-21232/): Denial of service in MySQL Server (low 2.2)
- [CVE-2024-21231](https://insights.sbomify.com/CVE-2024-21231/): Denial of service in MySQL Server (low 3.1)
- [CVE-2024-21230](https://insights.sbomify.com/CVE-2024-21230/): Denial of service in MySQL Cluster (medium 6.5)
- [CVE-2024-2123](https://insights.sbomify.com/CVE-2024-2123/): Ultimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2024-2122](https://insights.sbomify.com/CVE-2024-2122/): FooGallery <= 2.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Custom URL (medium 6.4)
- [CVE-2024-21219](https://insights.sbomify.com/CVE-2024-21219/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21218](https://insights.sbomify.com/CVE-2024-21218/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2024-21217](https://insights.sbomify.com/CVE-2024-21217/): Deserialization in Oracle Java SE (low 3.7)
- [CVE-2024-21216](https://insights.sbomify.com/CVE-2024-21216/): Missing authorization in Oracle WebLogic Server (critical 9.8)
- [CVE-2024-21215](https://insights.sbomify.com/CVE-2024-21215/): Missing authorization in Oracle WebLogic Server (high 7.5)
- [CVE-2024-21214](https://insights.sbomify.com/CVE-2024-21214/): Other in PeopleSoft Enterprise PeopleTools (high 8.1)
- [CVE-2024-21213](https://insights.sbomify.com/CVE-2024-21213/): Denial of service in MySQL Server (medium 4.2)
- [CVE-2024-21212](https://insights.sbomify.com/CVE-2024-21212/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2024-21211](https://insights.sbomify.com/CVE-2024-21211/): Other in GraalVM (low 3.7)
- [CVE-2024-21210](https://insights.sbomify.com/CVE-2024-21210/): Other in Oracle Java SE (low 3.7)
- [CVE-2024-2121](https://insights.sbomify.com/CVE-2024-2121/): Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 5.4)
- [CVE-2024-21209](https://insights.sbomify.com/CVE-2024-21209/): Information disclosure in MySQL Client (low 2.0)
- [CVE-2024-21208](https://insights.sbomify.com/CVE-2024-21208/): Denial of service in Oracle Java SE (low 3.7)
- [CVE-2024-21207](https://insights.sbomify.com/CVE-2024-21207/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21206](https://insights.sbomify.com/CVE-2024-21206/): Information disclosure in Oracle Enterprise Command Center Framework (medium 4.3)
- [CVE-2024-21205](https://insights.sbomify.com/CVE-2024-21205/): Information disclosure in Oracle Service Bus (medium 6.5)
- [CVE-2024-21204](https://insights.sbomify.com/CVE-2024-21204/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21203](https://insights.sbomify.com/CVE-2024-21203/): Denial of service in MySQL Cluster (medium 4.9)
- [CVE-2024-21202](https://insights.sbomify.com/CVE-2024-21202/): Cross-site request forgery in PeopleSoft Enterprise PeopleTools (medium 6.1)
- [CVE-2024-21201](https://insights.sbomify.com/CVE-2024-21201/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21200](https://insights.sbomify.com/CVE-2024-21200/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2120](https://insights.sbomify.com/CVE-2024-2120/): Elementor Website Builder Pro <= 3.20.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Navigation (medium 5.4)
- [CVE-2024-21199](https://insights.sbomify.com/CVE-2024-21199/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21198](https://insights.sbomify.com/CVE-2024-21198/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21197](https://insights.sbomify.com/CVE-2024-21197/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21196](https://insights.sbomify.com/CVE-2024-21196/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-21195](https://insights.sbomify.com/CVE-2024-21195/): Missing authorization in Oracle BI Publisher (high 7.6)
- [CVE-2024-21194](https://insights.sbomify.com/CVE-2024-21194/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21193](https://insights.sbomify.com/CVE-2024-21193/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21192](https://insights.sbomify.com/CVE-2024-21192/): Information disclosure in Oracle Enterprise Manager for Fusion Middleware (medium 4.4)
- [CVE-2024-21191](https://insights.sbomify.com/CVE-2024-21191/): Other in Oracle Enterprise Manager Fusion Middleware Control (high 7.6)
- [CVE-2024-21190](https://insights.sbomify.com/CVE-2024-21190/): Other in Oracle Global Lifecycle Management FMW Installer (high 7.5)
- [CVE-2024-2119](https://insights.sbomify.com/CVE-2024-2119/): LuckyWP Table of Contents <= 2.1.5 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2024-21188](https://insights.sbomify.com/CVE-2024-21188/): Cross-site scripting in Financial Services Revenue Management and Billing (medium 6.1)
- [CVE-2024-21185](https://insights.sbomify.com/CVE-2024-21185/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21184](https://insights.sbomify.com/CVE-2024-21184/): Other in Database - Enterprise Edition (high 7.2)
- [CVE-2024-21183](https://insights.sbomify.com/CVE-2024-21183/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2024-21182](https://insights.sbomify.com/CVE-2024-21182/): Oracle WebLogic Server Unspecified (high 7.5, exploited in the wild)
- [CVE-2024-21181](https://insights.sbomify.com/CVE-2024-21181/): Other in WebLogic Server (critical 9.8)
- [CVE-2024-21180](https://insights.sbomify.com/CVE-2024-21180/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.1)
- [CVE-2024-2118](https://insights.sbomify.com/CVE-2024-2118/): Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings (medium 5.9)
- [CVE-2024-21179](https://insights.sbomify.com/CVE-2024-21179/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21178](https://insights.sbomify.com/CVE-2024-21178/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2024-21177](https://insights.sbomify.com/CVE-2024-21177/): Denial of service in MySQL NDB Cluster (medium 6.5)
- [CVE-2024-21176](https://insights.sbomify.com/CVE-2024-21176/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2024-21175](https://insights.sbomify.com/CVE-2024-21175/): Memory corruption in WebLogic Server (high 7.5)
- [CVE-2024-21174](https://insights.sbomify.com/CVE-2024-21174/): Denial of service in Database - Enterprise Edition (low 3.1)
- [CVE-2024-21173](https://insights.sbomify.com/CVE-2024-21173/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21172](https://insights.sbomify.com/CVE-2024-21172/): Other in Oracle Hospitality OPERA 5 (critical 9.0)
- [CVE-2024-21171](https://insights.sbomify.com/CVE-2024-21171/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-21170](https://insights.sbomify.com/CVE-2024-21170/): Other in MySQL Connectors (medium 6.3)
- [CVE-2024-2117](https://insights.sbomify.com/CVE-2024-2117/): Cross-site scripting in Elementor Website Builder – more than just a page builder (medium 6.4)
- [CVE-2024-21169](https://insights.sbomify.com/CVE-2024-21169/): Missing authorization in Marketing (medium 6.5)
- [CVE-2024-21168](https://insights.sbomify.com/CVE-2024-21168/): Other in JD Edwards EnterpriseOne Orchestrator (medium 6.5)
- [CVE-2024-21167](https://insights.sbomify.com/CVE-2024-21167/): Other in Trading Community (high 8.1)
- [CVE-2024-21166](https://insights.sbomify.com/CVE-2024-21166/): Missing authorization in MySQL Server (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/454/