# Vulnerabilities published in 2024


- [CVE-2024-20978](https://insights.sbomify.com/CVE-2024-20978/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20977](https://insights.sbomify.com/CVE-2024-20977/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20976](https://insights.sbomify.com/CVE-2024-20976/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20975](https://insights.sbomify.com/CVE-2024-20975/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20974](https://insights.sbomify.com/CVE-2024-20974/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20973](https://insights.sbomify.com/CVE-2024-20973/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20972](https://insights.sbomify.com/CVE-2024-20972/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20971](https://insights.sbomify.com/CVE-2024-20971/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20970](https://insights.sbomify.com/CVE-2024-20970/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-2097](https://insights.sbomify.com/CVE-2024-2097/): Code injection in MACH SCM Server (high 7.5)
- [CVE-2024-20969](https://insights.sbomify.com/CVE-2024-20969/): Other in MySQL Server (medium 5.5)
- [CVE-2024-20968](https://insights.sbomify.com/CVE-2024-20968/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2024-20967](https://insights.sbomify.com/CVE-2024-20967/): Other in MySQL Server (medium 5.5)
- [CVE-2024-20966](https://insights.sbomify.com/CVE-2024-20966/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2024-20965](https://insights.sbomify.com/CVE-2024-20965/): Denial of service in MySQL NDB Cluster (medium 4.9)
- [CVE-2024-20964](https://insights.sbomify.com/CVE-2024-20964/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2024-20963](https://insights.sbomify.com/CVE-2024-20963/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20962](https://insights.sbomify.com/CVE-2024-20962/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20961](https://insights.sbomify.com/CVE-2024-20961/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20960](https://insights.sbomify.com/CVE-2024-20960/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2024-20959](https://insights.sbomify.com/CVE-2024-20959/): Denial of service in Sun ZFS Storage Appliance Kit (AK) Software (medium 4.4)
- [CVE-2024-20958](https://insights.sbomify.com/CVE-2024-20958/): Other in Installed Base (medium 5.4)
- [CVE-2024-20957](https://insights.sbomify.com/CVE-2024-20957/): Denial of service in JD Edwards EnterpriseOne Tools (low 2.7)
- [CVE-2024-20956](https://insights.sbomify.com/CVE-2024-20956/): Other in Agile Product Lifecycle Management for Process (high 7.3)
- [CVE-2024-20955](https://insights.sbomify.com/CVE-2024-20955/): Information disclosure in GraalVM Enterprise Edition (low 3.7)
- [CVE-2024-20954](https://insights.sbomify.com/CVE-2024-20954/): Information disclosure in GraalVM (low 3.7)
- [CVE-2024-20953](https://insights.sbomify.com/CVE-2024-20953/): Oracle Agile Product Lifecycle Management (PLM) Deserialization (high 8.8, exploited in the wild)
- [CVE-2024-20952](https://insights.sbomify.com/CVE-2024-20952/): Use after free in Java SE JDK and JRE (high 7.4)
- [CVE-2024-20951](https://insights.sbomify.com/CVE-2024-20951/): Missing authorization in Customer Interaction History (medium 6.1)
- [CVE-2024-20950](https://insights.sbomify.com/CVE-2024-20950/): Cross-site scripting in Customer Interaction History (medium 6.1)
- [CVE-2024-20949](https://insights.sbomify.com/CVE-2024-20949/): Other in Customer Interaction History (medium 6.1)
- [CVE-2024-20948](https://insights.sbomify.com/CVE-2024-20948/): Missing authorization in Knowledge Management (medium 6.1)
- [CVE-2024-20947](https://insights.sbomify.com/CVE-2024-20947/): Other in Common Applications (medium 5.4)
- [CVE-2024-20946](https://insights.sbomify.com/CVE-2024-20946/): Denial of service in Solaris Operating System (medium 5.5)
- [CVE-2024-20945](https://insights.sbomify.com/CVE-2024-20945/): Information disclosure in Java SE JDK and JRE (medium 4.7)
- [CVE-2024-20944](https://insights.sbomify.com/CVE-2024-20944/): Cross-site request forgery in iSupport (medium 5.4)
- [CVE-2024-20943](https://insights.sbomify.com/CVE-2024-20943/): Missing authorization in Knowledge Management (medium 5.4)
- [CVE-2024-20942](https://insights.sbomify.com/CVE-2024-20942/): Cross-site request forgery in Complex Maintenance, Repair, and Overhaul (medium 6.1)
- [CVE-2024-20941](https://insights.sbomify.com/CVE-2024-20941/): Cross-site scripting in Installed Base (medium 6.1)
- [CVE-2024-20940](https://insights.sbomify.com/CVE-2024-20940/): Cross-site request forgery in Knowledge Management (medium 6.1)
- [CVE-2024-20939](https://insights.sbomify.com/CVE-2024-20939/): Denial of service in CRM Technical Foundation (medium 4.3)
- [CVE-2024-20938](https://insights.sbomify.com/CVE-2024-20938/): Missing authorization in iStore (medium 6.1)
- [CVE-2024-20937](https://insights.sbomify.com/CVE-2024-20937/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 4.3)
- [CVE-2024-20936](https://insights.sbomify.com/CVE-2024-20936/): Missing authorization in One-to-One Fulfillment (medium 6.1)
- [CVE-2024-20935](https://insights.sbomify.com/CVE-2024-20935/): Cross-site scripting in Installed Base (medium 6.1)
- [CVE-2024-20934](https://insights.sbomify.com/CVE-2024-20934/): Cross-site request forgery in Installed Base (medium 6.1)
- [CVE-2024-20933](https://insights.sbomify.com/CVE-2024-20933/): Cross-site request forgery in Installed Base (medium 6.1)
- [CVE-2024-20932](https://insights.sbomify.com/CVE-2024-20932/): Security feature bypass in Java SE JDK and JRE (high 7.5)
- [CVE-2024-20931](https://insights.sbomify.com/CVE-2024-20931/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2024-20930](https://insights.sbomify.com/CVE-2024-20930/): Other in Outside In Technology (medium 6.3)
- [CVE-2024-2093](https://insights.sbomify.com/CVE-2024-2093/): VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure (medium 6.5)
- [CVE-2024-20929](https://insights.sbomify.com/CVE-2024-20929/): Missing authorization in Application Object Library (medium 6.5)
- [CVE-2024-20928](https://insights.sbomify.com/CVE-2024-20928/): Cross-site scripting in WebCenter Content (medium 6.1)
- [CVE-2024-20927](https://insights.sbomify.com/CVE-2024-20927/): Missing authorization in WebLogic Server (high 8.6)
- [CVE-2024-20926](https://insights.sbomify.com/CVE-2024-20926/): Security feature bypass in Java SE JDK and JRE (medium 5.9)
- [CVE-2024-20925](https://insights.sbomify.com/CVE-2024-20925/): Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project (low 3.1)
- [CVE-2024-20924](https://insights.sbomify.com/CVE-2024-20924/): Other in Audit Vault and Database Firewall (high 7.6)
- [CVE-2024-20923](https://insights.sbomify.com/CVE-2024-20923/): Security feature bypass in Java SE JDK and JRE (low 3.1)
- [CVE-2024-20922](https://insights.sbomify.com/CVE-2024-20922/): Other in Java SE JDK and JRE (low 2.5)
- [CVE-2024-20921](https://insights.sbomify.com/CVE-2024-20921/): Information disclosure in Java SE JDK and JRE (medium 5.9)
- [CVE-2024-20920](https://insights.sbomify.com/CVE-2024-20920/): Information disclosure in Solaris Operating System (low 3.8)
- [CVE-2024-2092](https://insights.sbomify.com/CVE-2024-2092/): Elementor Addon Elements <= 1.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Twitter Widget (medium 5.4)
- [CVE-2024-20919](https://insights.sbomify.com/CVE-2024-20919/): Other in Java SE JDK and JRE (medium 5.9)
- [CVE-2024-20918](https://insights.sbomify.com/CVE-2024-20918/): Other in Java SE JDK and JRE (high 7.4)
- [CVE-2024-20917](https://insights.sbomify.com/CVE-2024-20917/): Other in Enterprise Manager Base Platform (high 7.5)
- [CVE-2024-20916](https://insights.sbomify.com/CVE-2024-20916/): Missing authorization in Enterprise Manager Base Platform (high 8.3)
- [CVE-2024-20915](https://insights.sbomify.com/CVE-2024-20915/): Denial of service in Application Object Library (medium 5.3)
- [CVE-2024-20914](https://insights.sbomify.com/CVE-2024-20914/): Information disclosure in Sun ZFS Storage Appliance Kit (AK) Software (low 2.3)
- [CVE-2024-20913](https://insights.sbomify.com/CVE-2024-20913/): Other in Business Intelligence Enterprise Edition (medium 5.4)
- [CVE-2024-20912](https://insights.sbomify.com/CVE-2024-20912/): Missing authorization in Audit Vault and Database Firewall (low 2.7)
- [CVE-2024-20911](https://insights.sbomify.com/CVE-2024-20911/): Missing authorization in Audit Vault and Database Firewall (low 2.6)
- [CVE-2024-20910](https://insights.sbomify.com/CVE-2024-20910/): Information disclosure in Audit Vault and Database Firewall (low 3.0)
- [CVE-2024-2091](https://insights.sbomify.com/CVE-2024-2091/): Elementor Addon Elements <= 1.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 5.4)
- [CVE-2024-20909](https://insights.sbomify.com/CVE-2024-20909/): Other in Audit Vault and Database Firewall (high 7.5)
- [CVE-2024-20908](https://insights.sbomify.com/CVE-2024-20908/): Cross-site scripting in WebCenter Sites (medium 6.1)
- [CVE-2024-20907](https://insights.sbomify.com/CVE-2024-20907/): Other in Web Applications Desktop Integrator (medium 6.1)
- [CVE-2024-20906](https://insights.sbomify.com/CVE-2024-20906/): Other in SSM - (hot-tamale) ILOM: Integrated Lights Out Manager (medium 4.8)
- [CVE-2024-20905](https://insights.sbomify.com/CVE-2024-20905/): Denial of service in JD Edwards EnterpriseOne Tools (low 2.7)
- [CVE-2024-20904](https://insights.sbomify.com/CVE-2024-20904/): Information disclosure in Business Intelligence Enterprise Edition (medium 5.0)
- [CVE-2024-20903](https://insights.sbomify.com/CVE-2024-20903/): Other in Database - Enterprise Edition (medium 6.5)
- [CVE-2024-20901](https://insights.sbomify.com/CVE-2024-20901/): Memory corruption in Samsung Mobile Devices (medium 5.9)
- [CVE-2024-20900](https://insights.sbomify.com/CVE-2024-20900/): Auth bypass in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-2090](https://insights.sbomify.com/CVE-2024-2090/): Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Server-Side Request Forgery (medium 6.4)
- [CVE-2024-20899](https://insights.sbomify.com/CVE-2024-20899/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20898](https://insights.sbomify.com/CVE-2024-20898/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20897](https://insights.sbomify.com/CVE-2024-20897/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20896](https://insights.sbomify.com/CVE-2024-20896/): Information disclosure in Samsung Mobile Devices (medium 5.5)
- [CVE-2024-20895](https://insights.sbomify.com/CVE-2024-20895/): Missing authorization in Samsung Mobile Devices (high 7.7)
- [CVE-2024-20894](https://insights.sbomify.com/CVE-2024-20894/): Auth bypass in Samsung Mobile Devices (medium 4.3)
- [CVE-2024-20893](https://insights.sbomify.com/CVE-2024-20893/): Memory corruption in Samsung Mobile Devices (medium 6.1)
- [CVE-2024-20892](https://insights.sbomify.com/CVE-2024-20892/): Security feature bypass in Samsung Mobile Devices (medium 6.5)
- [CVE-2024-20891](https://insights.sbomify.com/CVE-2024-20891/): Missing authorization in Samsung Mobile Devices (high 7.8)
- [CVE-2024-20890](https://insights.sbomify.com/CVE-2024-20890/): Other in Samsung Mobile Devices (medium 5.3)
- [CVE-2024-2089](https://insights.sbomify.com/CVE-2024-2089/): Remote Content Shortcode <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (medium 5.4)
- [CVE-2024-20889](https://insights.sbomify.com/CVE-2024-20889/): Auth bypass in Samsung Mobile Devices (medium 5.9)
- [CVE-2024-20888](https://insights.sbomify.com/CVE-2024-20888/): Missing authorization in Samsung Mobile Devices (high 7.8)
- [CVE-2024-20887](https://insights.sbomify.com/CVE-2024-20887/): Other in GalaxyBudsManager PC (medium 6.2)
- [CVE-2024-20886](https://insights.sbomify.com/CVE-2024-20886/): Other in Samsung Live Wallpaper PC (medium 6.2)
- [CVE-2024-20885](https://insights.sbomify.com/CVE-2024-20885/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2024-20884](https://insights.sbomify.com/CVE-2024-20884/): Missing authorization in Samsung Mobile Devices (medium 6.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/457/