# Vulnerabilities published in 2024


- [CVE-2024-20883](https://insights.sbomify.com/CVE-2024-20883/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2024-20882](https://insights.sbomify.com/CVE-2024-20882/): Memory corruption in Samsung Mobile Devices (medium 4.6)
- [CVE-2024-20881](https://insights.sbomify.com/CVE-2024-20881/): Other in Samsung Mobile Devices (medium 6.4)
- [CVE-2024-20880](https://insights.sbomify.com/CVE-2024-20880/): Memory corruption in Samsung Mobile Devices (medium 6.4)
- [CVE-2024-2088](https://insights.sbomify.com/CVE-2024-2088/): NextScripts: Social Networks Auto-Poster <= 4.4.3 - Authenticated(Subscriber+) Sensitive Information Exposure (high 8.5)
- [CVE-2024-20879](https://insights.sbomify.com/CVE-2024-20879/): Memory corruption in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20878](https://insights.sbomify.com/CVE-2024-20878/): Memory corruption in Samsung Mobile Devices (high 7.3)
- [CVE-2024-20877](https://insights.sbomify.com/CVE-2024-20877/): Memory corruption in Samsung Mobile Devices (high 7.3)
- [CVE-2024-20876](https://insights.sbomify.com/CVE-2024-20876/): Memory corruption in Samsung Mobile Devices (medium 6.1)
- [CVE-2024-20875](https://insights.sbomify.com/CVE-2024-20875/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20874](https://insights.sbomify.com/CVE-2024-20874/): Missing authorization in Samsung Mobile Devices (high 7.9)
- [CVE-2024-20873](https://insights.sbomify.com/CVE-2024-20873/): Memory corruption in Samsung Mobile Devices (medium 4.2)
- [CVE-2024-20872](https://insights.sbomify.com/CVE-2024-20872/): Missing authorization in TalkbackSE (medium 6.2)
- [CVE-2024-20871](https://insights.sbomify.com/CVE-2024-20871/): Security feature bypass in Samsung Keyboard (medium 4.9)
- [CVE-2024-20870](https://insights.sbomify.com/CVE-2024-20870/): Missing authorization in Galaxy Store (medium 5.1)
- [CVE-2024-2087](https://insights.sbomify.com/CVE-2024-2087/): Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form (high 7.2)
- [CVE-2024-20869](https://insights.sbomify.com/CVE-2024-20869/): Security feature bypass in Samsung Internet (medium 5.5)
- [CVE-2024-20868](https://insights.sbomify.com/CVE-2024-20868/): Other in Samsung Notes (medium 4.4)
- [CVE-2024-20867](https://insights.sbomify.com/CVE-2024-20867/): Privilege escalation in Samsung Email (medium 5.5)
- [CVE-2024-20866](https://insights.sbomify.com/CVE-2024-20866/): Auth bypass in Samsung Mobile Devices (medium 5.7)
- [CVE-2024-20865](https://insights.sbomify.com/CVE-2024-20865/): Auth bypass in Samsung Mobile Devices (medium 6.6)
- [CVE-2024-20864](https://insights.sbomify.com/CVE-2024-20864/): Missing authorization in Samsung Mobile Devices (medium 5.5)
- [CVE-2024-20863](https://insights.sbomify.com/CVE-2024-20863/): Memory corruption in Samsung Mobile Devices (medium 6.7)
- [CVE-2024-20862](https://insights.sbomify.com/CVE-2024-20862/): Memory corruption in Samsung Mobile Devices (medium 6.0)
- [CVE-2024-20861](https://insights.sbomify.com/CVE-2024-20861/): Use after free in Samsung Mobile Devices (medium 6.0)
- [CVE-2024-20860](https://insights.sbomify.com/CVE-2024-20860/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-2086](https://insights.sbomify.com/CVE-2024-2086/): Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export (critical 10.0)
- [CVE-2024-20859](https://insights.sbomify.com/CVE-2024-20859/): Missing authorization in Samsung Mobile Devices (medium 5.5)
- [CVE-2024-20858](https://insights.sbomify.com/CVE-2024-20858/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20857](https://insights.sbomify.com/CVE-2024-20857/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20856](https://insights.sbomify.com/CVE-2024-20856/): Auth bypass in Samsung Mobile Devices (medium 4.3)
- [CVE-2024-20855](https://insights.sbomify.com/CVE-2024-20855/): Security feature bypass in Samsung Mobile Devices (low 2.4)
- [CVE-2024-20854](https://insights.sbomify.com/CVE-2024-20854/): Missing authorization in Samsung Camera (medium 5.9)
- [CVE-2024-20853](https://insights.sbomify.com/CVE-2024-20853/): Missing authorization in ThemeStore (medium 5.1)
- [CVE-2024-20852](https://insights.sbomify.com/CVE-2024-20852/): Missing authorization in SmartThings (medium 5.9)
- [CVE-2024-20851](https://insights.sbomify.com/CVE-2024-20851/): Missing authorization in Samsung Data Store (medium 4.4)
- [CVE-2024-20850](https://insights.sbomify.com/CVE-2024-20850/): Information disclosure in Samsung Pay (medium 6.2)
- [CVE-2024-2085](https://insights.sbomify.com/CVE-2024-2085/): HT Mega – Absolute Addons For Elementor <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' (medium 6.4)
- [CVE-2024-20849](https://insights.sbomify.com/CVE-2024-20849/): Memory corruption in Samsung Mobile Devices (high 7.3)
- [CVE-2024-20848](https://insights.sbomify.com/CVE-2024-20848/): Memory corruption in Samsung Mobile Devices (medium 5.1)
- [CVE-2024-20847](https://insights.sbomify.com/CVE-2024-20847/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20846](https://insights.sbomify.com/CVE-2024-20846/): Memory corruption in Samsung Mobile Devices (medium 5.9)
- [CVE-2024-20845](https://insights.sbomify.com/CVE-2024-20845/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2024-20844](https://insights.sbomify.com/CVE-2024-20844/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2024-20843](https://insights.sbomify.com/CVE-2024-20843/): Memory corruption in Samsung Mobile Devices (medium 5.6)
- [CVE-2024-20842](https://insights.sbomify.com/CVE-2024-20842/): Memory corruption in Samsung Mobile Devices (medium 4.2)
- [CVE-2024-20841](https://insights.sbomify.com/CVE-2024-20841/): Missing authorization in Samnsung Account (medium 5.1)
- [CVE-2024-20840](https://insights.sbomify.com/CVE-2024-20840/): Missing authorization in Samsung Voice Recorder (medium 5.7)
- [CVE-2024-2084](https://insights.sbomify.com/CVE-2024-2084/): Cross-site scripting in HT Mega Addons for Elementor – Elementor Widgets & Template Builder (medium 6.4)
- [CVE-2024-20839](https://insights.sbomify.com/CVE-2024-20839/): Missing authorization in Samsung Voice Recorder (medium 4.6)
- [CVE-2024-20838](https://insights.sbomify.com/CVE-2024-20838/): Other in Samsung Internet (medium 6.8)
- [CVE-2024-20837](https://insights.sbomify.com/CVE-2024-20837/): Security feature bypass in Samsung Internet (medium 5.3)
- [CVE-2024-20836](https://insights.sbomify.com/CVE-2024-20836/): Memory corruption in Samsung Mobile Devices (low 3.3)
- [CVE-2024-20835](https://insights.sbomify.com/CVE-2024-20835/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20834](https://insights.sbomify.com/CVE-2024-20834/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2024-20833](https://insights.sbomify.com/CVE-2024-20833/): Use after free in Samsung Mobile Devices (medium 4.1)
- [CVE-2024-20832](https://insights.sbomify.com/CVE-2024-20832/): Memory corruption in Samsung Mobile Devices (medium 6.4)
- [CVE-2024-20831](https://insights.sbomify.com/CVE-2024-20831/): Memory corruption in Samsung Mobile Devices (medium 6.4)
- [CVE-2024-20830](https://insights.sbomify.com/CVE-2024-20830/): Misconfiguration in Samsung Mobile Devices (medium 5.3)
- [CVE-2024-2083](https://insights.sbomify.com/CVE-2024-2083/): Directory Traversal in zenml-io/zenml (critical 9.9)
- [CVE-2024-20829](https://insights.sbomify.com/CVE-2024-20829/): Security feature bypass in Samsung Internet (medium 5.4)
- [CVE-2024-20828](https://insights.sbomify.com/CVE-2024-20828/): Missing authorization in Samsung Internet (low 2.4)
- [CVE-2024-20827](https://insights.sbomify.com/CVE-2024-20827/): Security feature bypass in Gallery (medium 4.6)
- [CVE-2024-20826](https://insights.sbomify.com/CVE-2024-20826/): Information disclosure in UPHelper (medium 5.5)
- [CVE-2024-20825](https://insights.sbomify.com/CVE-2024-20825/): Information disclosure in Galaxy Store (medium 5.5)
- [CVE-2024-20824](https://insights.sbomify.com/CVE-2024-20824/): Information disclosure in Galaxy Store (medium 5.5)
- [CVE-2024-20823](https://insights.sbomify.com/CVE-2024-20823/): Information disclosure in Galaxy Store (medium 5.5)
- [CVE-2024-20822](https://insights.sbomify.com/CVE-2024-20822/): Information disclosure in Galaxy Store (medium 5.5)
- [CVE-2024-20821](https://insights.sbomify.com/CVE-2024-20821/): Security feature bypass in Samsung Mobile Devices (medium 4.4)
- [CVE-2024-20820](https://insights.sbomify.com/CVE-2024-20820/): Memory corruption in Samsung Mobile Devices (medium 4.4)
- [CVE-2024-2082](https://insights.sbomify.com/CVE-2024-2082/): Cross-site scripting in EleForms – All In One Form Integration including DB for Elementor (high 7.2)
- [CVE-2024-20819](https://insights.sbomify.com/CVE-2024-20819/): Memory corruption in Samsung Mobile Devices (medium 6.6)
- [CVE-2024-20818](https://insights.sbomify.com/CVE-2024-20818/): Memory corruption in Samsung Mobile Devices (medium 6.6)
- [CVE-2024-20817](https://insights.sbomify.com/CVE-2024-20817/): Memory corruption in Samsung Mobile Devices (medium 6.6)
- [CVE-2024-20816](https://insights.sbomify.com/CVE-2024-20816/): Auth bypass in Samsung Mobile Devices (high 8.0)
- [CVE-2024-20815](https://insights.sbomify.com/CVE-2024-20815/): Auth bypass in Samsung Mobile Devices (high 8.0)
- [CVE-2024-20814](https://insights.sbomify.com/CVE-2024-20814/): Memory corruption in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20813](https://insights.sbomify.com/CVE-2024-20813/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2024-20812](https://insights.sbomify.com/CVE-2024-20812/): Memory corruption in Samsung Mobile Devices (high 8.4)
- [CVE-2024-20811](https://insights.sbomify.com/CVE-2024-20811/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2024-20810](https://insights.sbomify.com/CVE-2024-20810/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2024-2081](https://insights.sbomify.com/CVE-2024-2081/): FooGallery <= 2.4.14 - Authenticated (Author+) Stored Cross-Site Scripting (medium 6.4)
- [CVE-2024-20809](https://insights.sbomify.com/CVE-2024-20809/): Missing authorization in Nearby device scanning (medium 4.0)
- [CVE-2024-20808](https://insights.sbomify.com/CVE-2024-20808/): Missing authorization in Nearby device scanning (medium 4.0)
- [CVE-2024-20807](https://insights.sbomify.com/CVE-2024-20807/): Information disclosure in Samsung Email (low 3.3)
- [CVE-2024-20806](https://insights.sbomify.com/CVE-2024-20806/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2024-20805](https://insights.sbomify.com/CVE-2024-20805/): Path traversal in Samsung Mobile Devices (low 3.3)
- [CVE-2024-20804](https://insights.sbomify.com/CVE-2024-20804/): Path traversal in Samsung Mobile Devices (medium 4.0)
- [CVE-2024-20803](https://insights.sbomify.com/CVE-2024-20803/): Auth bypass in Samsung Mobile Devices (medium 6.8)
- [CVE-2024-20802](https://insights.sbomify.com/CVE-2024-20802/): Missing authorization in Samsung Mobile Devices (medium 4.6)
- [CVE-2024-20800](https://insights.sbomify.com/CVE-2024-20800/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2024-2080](https://insights.sbomify.com/CVE-2024-2080/): LiquidPoll – Polls, Surveys, NPS and Feedback Reviews <= 3.3.76 - Information Exposure (medium 4.3)
- [CVE-2024-20799](https://insights.sbomify.com/CVE-2024-20799/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2024-20798](https://insights.sbomify.com/CVE-2024-20798/): Illustrator 2024 CDR File parsing Out of Bound Read Information disclosure vulnerability (medium 5.5)
- [CVE-2024-20797](https://insights.sbomify.com/CVE-2024-20797/): Out-of-bounds access vulnerability in Adobe Animate that directly changes the rip when parsing FLA files. (high 7.8)
- [CVE-2024-20796](https://insights.sbomify.com/CVE-2024-20796/): Adobe Animation SWF File Parsing Memory Corruption (medium 5.5)
- [CVE-2024-20795](https://insights.sbomify.com/CVE-2024-20795/): Animate has an arbitrary code execution vulnerability when parsing svg files (high 7.8)
- [CVE-2024-20794](https://insights.sbomify.com/CVE-2024-20794/): Adobe Animate 2024 WAV File Parsing Null Pointer Dereference (medium 5.5)
- [CVE-2024-20793](https://insights.sbomify.com/CVE-2024-20793/): Illustrator 2024 TIF file parsing Out Of Bound Read Information disclosure vulnerability (medium 5.5)
- [CVE-2024-20792](https://insights.sbomify.com/CVE-2024-20792/): Adobe Illustrator TIF File Parsing Use-After-Free Remote memory corruption (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/458/