# Vulnerabilities published in 2024


- [CVE-2024-21165](https://insights.sbomify.com/CVE-2024-21165/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21164](https://insights.sbomify.com/CVE-2024-21164/): Memory corruption in VM VirtualBox (low 2.5)
- [CVE-2024-21163](https://insights.sbomify.com/CVE-2024-21163/): Denial of service in MySQL Server (medium 5.5)
- [CVE-2024-21162](https://insights.sbomify.com/CVE-2024-21162/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21161](https://insights.sbomify.com/CVE-2024-21161/): Denial of service in VM VirtualBox (medium 5.5)
- [CVE-2024-21160](https://insights.sbomify.com/CVE-2024-21160/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2116](https://insights.sbomify.com/CVE-2024-2116/): Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2024-21159](https://insights.sbomify.com/CVE-2024-21159/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21158](https://insights.sbomify.com/CVE-2024-21158/): Other in PeopleSoft Enterprise PT PeopleTools (medium 6.4)
- [CVE-2024-21157](https://insights.sbomify.com/CVE-2024-21157/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21155](https://insights.sbomify.com/CVE-2024-21155/): Other in Sun ZFS Storage Appliance Kit (AK) Software (medium 4.7)
- [CVE-2024-21154](https://insights.sbomify.com/CVE-2024-21154/): Cross-site scripting in PeopleSoft Enterprise HCM Human Resources (medium 4.3)
- [CVE-2024-21153](https://insights.sbomify.com/CVE-2024-21153/): Missing authorization in Process Manufacturing Product Development (high 8.1)
- [CVE-2024-21152](https://insights.sbomify.com/CVE-2024-21152/): Information disclosure in Process Manufacturing Financials (high 8.1)
- [CVE-2024-21151](https://insights.sbomify.com/CVE-2024-21151/): Denial of service in Solaris Operating System (low 3.3)
- [CVE-2024-21150](https://insights.sbomify.com/CVE-2024-21150/): Missing authorization in JD Edwards EnterpriseOne Tools (medium 6.1)
- [CVE-2024-2115](https://insights.sbomify.com/CVE-2024-2115/): LearnPress – WordPress LMS Plugin <= 4.0.0 - Cross-Site Request Forgery to Privilege Escalation (high 8.8)
- [CVE-2024-21149](https://insights.sbomify.com/CVE-2024-21149/): Missing authorization in Enterprise Asset Management (high 8.1)
- [CVE-2024-21148](https://insights.sbomify.com/CVE-2024-21148/): Other in Applications Framework (medium 4.8)
- [CVE-2024-21147](https://insights.sbomify.com/CVE-2024-21147/): Information disclosure in Java SE JDK and JRE (high 7.4)
- [CVE-2024-21146](https://insights.sbomify.com/CVE-2024-21146/): Missing authorization in Trade Management (high 8.1)
- [CVE-2024-21145](https://insights.sbomify.com/CVE-2024-21145/): Other in Java SE JDK and JRE (medium 4.8)
- [CVE-2024-21144](https://insights.sbomify.com/CVE-2024-21144/): Denial of service in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21143](https://insights.sbomify.com/CVE-2024-21143/): Information disclosure in iStore (medium 5.3)
- [CVE-2024-21142](https://insights.sbomify.com/CVE-2024-21142/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21141](https://insights.sbomify.com/CVE-2024-21141/): Privilege escalation in VM VirtualBox (high 8.2)
- [CVE-2024-21140](https://insights.sbomify.com/CVE-2024-21140/): Information disclosure in Java SE JDK and JRE (medium 4.8)
- [CVE-2024-21139](https://insights.sbomify.com/CVE-2024-21139/): Other in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2024-21138](https://insights.sbomify.com/CVE-2024-21138/): Denial of service in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21137](https://insights.sbomify.com/CVE-2024-21137/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21136](https://insights.sbomify.com/CVE-2024-21136/): Information disclosure in Retail Xstore Office (high 8.6)
- [CVE-2024-21135](https://insights.sbomify.com/CVE-2024-21135/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21134](https://insights.sbomify.com/CVE-2024-21134/): Denial of service in MySQL Server (medium 4.3)
- [CVE-2024-21133](https://insights.sbomify.com/CVE-2024-21133/): Cross-site scripting in Reports Developer (medium 6.1)
- [CVE-2024-21132](https://insights.sbomify.com/CVE-2024-21132/): Missing authorization in Purchasing (medium 5.4)
- [CVE-2024-21131](https://insights.sbomify.com/CVE-2024-21131/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21130](https://insights.sbomify.com/CVE-2024-21130/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2113](https://insights.sbomify.com/CVE-2024-2113/): Cross-site request forgery in Ninja Forms – The Contact Form Builder That Grows With You (medium 4.3)
- [CVE-2024-21129](https://insights.sbomify.com/CVE-2024-21129/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21128](https://insights.sbomify.com/CVE-2024-21128/): Other in Application Object Library (medium 5.4)
- [CVE-2024-21127](https://insights.sbomify.com/CVE-2024-21127/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21126](https://insights.sbomify.com/CVE-2024-21126/): Denial of service in Database - Enterprise Edition (medium 5.8)
- [CVE-2024-21125](https://insights.sbomify.com/CVE-2024-21125/): Denial of service in MySQL NDB Cluster (medium 4.9)
- [CVE-2024-21123](https://insights.sbomify.com/CVE-2024-21123/): Misconfiguration in Database - Enterprise Edition (low 2.3)
- [CVE-2024-21122](https://insights.sbomify.com/CVE-2024-21122/): Misconfiguration in PeopleSoft Enterprise HCM Shared Components (medium 5.4)
- [CVE-2024-21121](https://insights.sbomify.com/CVE-2024-21121/): Privilege escalation in VM VirtualBox (medium 6.5)
- [CVE-2024-21120](https://insights.sbomify.com/CVE-2024-21120/): Missing authorization in Outside In Technology (medium 5.3)
- [CVE-2024-2112](https://insights.sbomify.com/CVE-2024-2112/): Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder <= 1.15.22 - Sensitive Information Exposure (medium 5.9)
- [CVE-2024-21119](https://insights.sbomify.com/CVE-2024-21119/): Other in Outside In Technology (medium 5.3)
- [CVE-2024-21118](https://insights.sbomify.com/CVE-2024-21118/): Privilege escalation in Outside In Technology (medium 5.3)
- [CVE-2024-21117](https://insights.sbomify.com/CVE-2024-21117/): Other in Outside In Technology (medium 5.3)
- [CVE-2024-21116](https://insights.sbomify.com/CVE-2024-21116/): Privilege escalation in VM VirtualBox (high 7.8)
- [CVE-2024-21115](https://insights.sbomify.com/CVE-2024-21115/): Other in VM VirtualBox (high 8.8)
- [CVE-2024-21114](https://insights.sbomify.com/CVE-2024-21114/): Other in VM VirtualBox (high 8.8)
- [CVE-2024-21113](https://insights.sbomify.com/CVE-2024-21113/): Other in VM VirtualBox (high 8.8)
- [CVE-2024-21112](https://insights.sbomify.com/CVE-2024-21112/): Other in VM VirtualBox (high 8.8)
- [CVE-2024-21111](https://insights.sbomify.com/CVE-2024-21111/): Privilege escalation in VM VirtualBox (high 7.8)
- [CVE-2024-21110](https://insights.sbomify.com/CVE-2024-21110/): Other in VM VirtualBox (high 7.3)
- [CVE-2024-2111](https://insights.sbomify.com/CVE-2024-2111/): Events Manager <= 6.4.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-21109](https://insights.sbomify.com/CVE-2024-21109/): Information disclosure in VM VirtualBox (medium 5.9)
- [CVE-2024-21108](https://insights.sbomify.com/CVE-2024-21108/): Information disclosure in VM VirtualBox (low 3.3)
- [CVE-2024-21107](https://insights.sbomify.com/CVE-2024-21107/): Other in VM VirtualBox (medium 6.7)
- [CVE-2024-21106](https://insights.sbomify.com/CVE-2024-21106/): Denial of service in VM VirtualBox (medium 6.5)
- [CVE-2024-21105](https://insights.sbomify.com/CVE-2024-21105/): Integer overflow in Solaris Operating System (low 2.0)
- [CVE-2024-21104](https://insights.sbomify.com/CVE-2024-21104/): Other in Sun ZFS Storage Appliance Kit (AK) Software (medium 6.5)
- [CVE-2024-21103](https://insights.sbomify.com/CVE-2024-21103/): Other in VM VirtualBox (high 7.8)
- [CVE-2024-21102](https://insights.sbomify.com/CVE-2024-21102/): Denial of service in MySQL NDB Cluster (medium 4.9)
- [CVE-2024-21101](https://insights.sbomify.com/CVE-2024-21101/): Privilege escalation in MySQL NDB Cluster (low 2.2)
- [CVE-2024-21100](https://insights.sbomify.com/CVE-2024-21100/): Other in Commerce Platform (medium 4.0)
- [CVE-2024-2110](https://insights.sbomify.com/CVE-2024-2110/): Events Manager <= 6.4.7.1 - Cross-Site Request Forgery (medium 4.3)
- [CVE-2024-21099](https://insights.sbomify.com/CVE-2024-21099/): Information disclosure in Business Intelligence Enterprise Edition (medium 4.3)
- [CVE-2024-21098](https://insights.sbomify.com/CVE-2024-21098/): Denial of service in GraalVM (low 3.7)
- [CVE-2024-21097](https://insights.sbomify.com/CVE-2024-21097/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.9)
- [CVE-2024-21096](https://insights.sbomify.com/CVE-2024-21096/): Other in MySQL Server (medium 4.9)
- [CVE-2024-21095](https://insights.sbomify.com/CVE-2024-21095/): Information disclosure in Primavera P6 Enterprise Project Portfolio Management (high 8.2)
- [CVE-2024-21094](https://insights.sbomify.com/CVE-2024-21094/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21093](https://insights.sbomify.com/CVE-2024-21093/): Other in Database - Enterprise Edition (medium 5.3)
- [CVE-2024-21092](https://insights.sbomify.com/CVE-2024-21092/): Other in Agile Product Lifecycle Management for Process (high 8.1)
- [CVE-2024-21091](https://insights.sbomify.com/CVE-2024-21091/): Missing authorization in Agile Product Lifecycle Management for Process (medium 6.5)
- [CVE-2024-21090](https://insights.sbomify.com/CVE-2024-21090/): Denial of service in MySQL Connectors (high 7.5)
- [CVE-2024-2109](https://insights.sbomify.com/CVE-2024-2109/): Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display (medium 5.3)
- [CVE-2024-21089](https://insights.sbomify.com/CVE-2024-21089/): Other in Concurrent Processing (medium 6.5)
- [CVE-2024-21088](https://insights.sbomify.com/CVE-2024-21088/): Other in Production Scheduling (high 7.5)
- [CVE-2024-21087](https://insights.sbomify.com/CVE-2024-21087/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-21086](https://insights.sbomify.com/CVE-2024-21086/): Other in CRM Technical Foundation (medium 4.3)
- [CVE-2024-21085](https://insights.sbomify.com/CVE-2024-21085/): Denial of service in Java SE JDK and JRE (low 3.7)
- [CVE-2024-21084](https://insights.sbomify.com/CVE-2024-21084/): Missing authorization in BI Publisher (formerly XML Publisher) (medium 5.8)
- [CVE-2024-21083](https://insights.sbomify.com/CVE-2024-21083/): Missing authorization in BI Publisher (formerly XML Publisher) (high 7.2)
- [CVE-2024-21082](https://insights.sbomify.com/CVE-2024-21082/): XML external entity in BI Publisher (formerly XML Publisher) (critical 9.8)
- [CVE-2024-21081](https://insights.sbomify.com/CVE-2024-21081/): Other in Partner Management (medium 4.7)
- [CVE-2024-21080](https://insights.sbomify.com/CVE-2024-21080/): Other in Applications Framework (medium 6.5)
- [CVE-2024-2108](https://insights.sbomify.com/CVE-2024-2108/): Cross-site scripting in Ninja Forms – The Contact Form Builder That Grows With You (medium 4.6)
- [CVE-2024-21079](https://insights.sbomify.com/CVE-2024-21079/): Other in Marketing (high 7.5)
- [CVE-2024-21078](https://insights.sbomify.com/CVE-2024-21078/): Other in Marketing (high 7.5)
- [CVE-2024-21077](https://insights.sbomify.com/CVE-2024-21077/): Information disclosure in Trade Management (high 7.5)
- [CVE-2024-21076](https://insights.sbomify.com/CVE-2024-21076/): Missing authorization in Trade Management (high 7.5)
- [CVE-2024-21075](https://insights.sbomify.com/CVE-2024-21075/): Other in Trade Management (high 7.5)
- [CVE-2024-21074](https://insights.sbomify.com/CVE-2024-21074/): Missing authorization in Trade Management (high 7.5)
- [CVE-2024-21073](https://insights.sbomify.com/CVE-2024-21073/): Information disclosure in Trade Management (high 7.5)
- [CVE-2024-21072](https://insights.sbomify.com/CVE-2024-21072/): Cross-site scripting in Installed Base (medium 6.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/455/