# Vulnerabilities published in 2024 - [CVE-2024-20791](https://insights.sbomify.com/CVE-2024-20791/): Illustrator 2024 BMP File Parsing Memory Corruption (high 7.8) - [CVE-2024-20790](https://insights.sbomify.com/CVE-2024-20790/): Adobe Dimension Memory Corruption Out-of-Bounds-READ Vulnerability I, when parsing FBX file (medium 5.5) - [CVE-2024-2079](https://insights.sbomify.com/CVE-2024-2079/): Cross-site scripting in WPBakery Page Builder Addons by Livemesh (medium 6.4) - [CVE-2024-20789](https://insights.sbomify.com/CVE-2024-20789/): ZDI-CAN-24030: Adobe Dimension SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20787](https://insights.sbomify.com/CVE-2024-20787/): Substance3D - Painter | Out-of-bounds Read (CWE-125) (medium 5.5) - [CVE-2024-20785](https://insights.sbomify.com/CVE-2024-20785/): Adobe Indesign 2024 TIFF File Parsing Memory Corruption Remote Code Execution vulnerability (high 7.8) - [CVE-2024-20784](https://insights.sbomify.com/CVE-2024-20784/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-20783](https://insights.sbomify.com/CVE-2024-20783/): Adobe Indesign 2024 RLE File Parsing Heap Memory Corruption (high 7.8) - [CVE-2024-20782](https://insights.sbomify.com/CVE-2024-20782/): Adobe Indesign WMF File Parsing Out Of Bound Write (high 7.8) - [CVE-2024-20781](https://insights.sbomify.com/CVE-2024-20781/): Adobe Indesign TIF File Parsing Heap Memory Corruption (high 7.8) - [CVE-2024-20780](https://insights.sbomify.com/CVE-2024-20780/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-2078](https://insights.sbomify.com/CVE-2024-2078/): Cross-Site Scripting vulnerability in HelpDeskZ (medium 4.6) - [CVE-2024-20779](https://insights.sbomify.com/CVE-2024-20779/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-20778](https://insights.sbomify.com/CVE-2024-20778/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-20772](https://insights.sbomify.com/CVE-2024-20772/): Adobe Media Encoder 2024 AI file parsing Stack based buffer overflow (high 7.8) - [CVE-2024-20771](https://insights.sbomify.com/CVE-2024-20771/): Bridge 2024 MOV File parsing memory corruption (medium 5.5) - [CVE-2024-20770](https://insights.sbomify.com/CVE-2024-20770/): Adobe Photoshop 2024 TIF File parsing Out-Of-Bound Read (medium 5.5) - [CVE-2024-2077](https://insights.sbomify.com/CVE-2024-2077/): SourceCodester Simple Online Bidding System index.php sql injection (medium 6.3) - [CVE-2024-20769](https://insights.sbomify.com/CVE-2024-20769/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-20768](https://insights.sbomify.com/CVE-2024-20768/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-20767](https://insights.sbomify.com/CVE-2024-20767/): Adobe ColdFusion Improper Access Control (high 7.4, exploited in the wild) - [CVE-2024-20766](https://insights.sbomify.com/CVE-2024-20766/): Adobe Indesign 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerabiity (medium 5.5) - [CVE-2024-20765](https://insights.sbomify.com/CVE-2024-20765/): ZDI-CAN-22674: Adobe Acrobat Reader DC PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20764](https://insights.sbomify.com/CVE-2024-20764/): Adobe Animate 2024 SWF File parsing memory corruption (medium 5.5) - [CVE-2024-20763](https://insights.sbomify.com/CVE-2024-20763/): Adobe Animate 2024 GIF file parsing memory corruption (medium 5.5) - [CVE-2024-20762](https://insights.sbomify.com/CVE-2024-20762/): Adobe Animate MP3 File parsing unitialized heap memory corruption (medium 5.5) - [CVE-2024-20761](https://insights.sbomify.com/CVE-2024-20761/): Adobe Animate 2024 BMP File Parsing Out-Of-Bound Write Remote Code execution Vulnerability (high 7.8) - [CVE-2024-20760](https://insights.sbomify.com/CVE-2024-20760/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4) - [CVE-2024-2076](https://insights.sbomify.com/CVE-2024-2076/): CodeAstro House Rental Management System tenant.php missing authentication (medium 5.3) - [CVE-2024-20759](https://insights.sbomify.com/CVE-2024-20759/): Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (high 8.1) - [CVE-2024-20758](https://insights.sbomify.com/CVE-2024-20758/): Adobe Commerce | Improper Input Validation (CWE-20) (critical 9.0) - [CVE-2024-20757](https://insights.sbomify.com/CVE-2024-20757/): Bridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-20756](https://insights.sbomify.com/CVE-2024-20756/): Adobe Bridge 2024 Out of Bound Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20755](https://insights.sbomify.com/CVE-2024-20755/): Adobe Bridge PDF Parsing Heap Memory Corruption Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20754](https://insights.sbomify.com/CVE-2024-20754/): Lightroom Desktop | Untrusted Search Path (CWE-426) (high 7.8) - [CVE-2024-20753](https://insights.sbomify.com/CVE-2024-20753/): Adobe Photoshop PDF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20752](https://insights.sbomify.com/CVE-2024-20752/): ZDI-CAN-22653: Adobe Bridge PS File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20750](https://insights.sbomify.com/CVE-2024-20750/): Adobe Substance 3D Designer PICT Parsing Out-Of-Bounds Read Vulnerability (high 7.8) - [CVE-2024-2075](https://insights.sbomify.com/CVE-2024-2075/): SourceCodester Daily Habit Tracker update-tracker.php cross site scripting (low 3.5) - [CVE-2024-20749](https://insights.sbomify.com/CVE-2024-20749/): TALOS-2023-1910 - Adobe Acrobat Reader Font CharStrings CharStringsOffset out-of-bounds read vulnerability (medium 5.5) - [CVE-2024-20748](https://insights.sbomify.com/CVE-2024-20748/): TALOS-2023-1909 - Adobe Acrobat Reader Font avar SegmentMaps out-of-bounds read vulnerability (medium 5.5) - [CVE-2024-20747](https://insights.sbomify.com/CVE-2024-20747/): TALOS-2023-1908 - Adobe Acrobat Reader Font CharStrings INDEX out-of-bounds read vulnerability (medium 5.5) - [CVE-2024-20746](https://insights.sbomify.com/CVE-2024-20746/): Adobe Premiere Pro Out-of-bounds Write Arbitrary code execution (high 7.8) - [CVE-2024-20745](https://insights.sbomify.com/CVE-2024-20745/): ZDI-CAN-22671: Adobe Premiere Pro AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20744](https://insights.sbomify.com/CVE-2024-20744/): Adobe Substance 3D Paint PICT Parsing Access Violation Write Vulnerability (high 7.8) - [CVE-2024-20743](https://insights.sbomify.com/CVE-2024-20743/): Adobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability (high 7.8) - [CVE-2024-20742](https://insights.sbomify.com/CVE-2024-20742/): Adobe Substance 3D Paint RAS File Parsing Out-Of-Bounds Read Vulnerability (high 7.8) - [CVE-2024-20741](https://insights.sbomify.com/CVE-2024-20741/): Adobe Substance 3D Paint ICO Parsing Access Violation Write Vulnerability (high 7.8) - [CVE-2024-20740](https://insights.sbomify.com/CVE-2024-20740/): Adobe Substance 3D Paint PSD Parsing Out-Of-Bounds Write Vulnerability (high 7.8) - [CVE-2024-2074](https://insights.sbomify.com/CVE-2024-2074/): Mini-Tmall 1 sql injection (medium 6.3) - [CVE-2024-20739](https://insights.sbomify.com/CVE-2024-20739/): ZDI-CAN-22647: Adobe Audition AVI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20738](https://insights.sbomify.com/CVE-2024-20738/): Adobe FrameMaker Publishing Server Authentication Bypass Vulnerability | CVE-2023-44324 bypass (critical 9.8) - [CVE-2024-20737](https://insights.sbomify.com/CVE-2024-20737/): Adobe After Effect 2024 RGB File parsing Memory Corruption Vulnerability (medium 5.5) - [CVE-2024-20736](https://insights.sbomify.com/CVE-2024-20736/): ZDI-CAN-22822: Adobe Acrobat Pro DC AcroForm Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-20735](https://insights.sbomify.com/CVE-2024-20735/): TALOS-2023-1905 - Adobe Acrobat Reader Font CPAL numColorRecords out-of-bounds read vulnerability (medium 5.5) - [CVE-2024-20734](https://insights.sbomify.com/CVE-2024-20734/): ZDI-CAN-22516: Adobe Acrobat Pro DC AcroForm Use-After-Free Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-20733](https://insights.sbomify.com/CVE-2024-20733/): [ZS-VR-23-360] Adobe Acrobat Reader Parsing OTF font Denial-of-Service Vulnerability (medium 5.5) - [CVE-2024-20731](https://insights.sbomify.com/CVE-2024-20731/): TALOS-2023-1901 - Adobe Acrobat Reader FileAttachment PDAnnot destroy use-after-free vulnerability (high 7.8) - [CVE-2024-20730](https://insights.sbomify.com/CVE-2024-20730/): TALOS-2023-1906 - Adobe Acrobat Reader Font CPAL integer overflow vulnerability (high 7.8) - [CVE-2024-2073](https://insights.sbomify.com/CVE-2024-2073/): SourceCodester Block Inserter for Dynamic Content view_post.php sql injection (medium 6.3) - [CVE-2024-20729](https://insights.sbomify.com/CVE-2024-20729/): TALOS-2023-1890 - Adobe Acrobat Reader Annot3D object zoom event use-after-free vulnerability (high 7.8) - [CVE-2024-20728](https://insights.sbomify.com/CVE-2024-20728/): ZDI-CAN-22727: Adobe Acrobat Pro DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8) - [CVE-2024-20727](https://insights.sbomify.com/CVE-2024-20727/): [TianfuCup] out-of-bounds access vulnerability when parsing jpeg2000 (high 7.8) - [CVE-2024-20726](https://insights.sbomify.com/CVE-2024-20726/): [TianfuCup] JP2K Image Parsing Out-Of-Bounds Write (high 7.8) - [CVE-2024-20725](https://insights.sbomify.com/CVE-2024-20725/): Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability I (medium 5.5) - [CVE-2024-20724](https://insights.sbomify.com/CVE-2024-20724/): Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability II (medium 5.5) - [CVE-2024-20723](https://insights.sbomify.com/CVE-2024-20723/): Adobe Substance 3D Painter v9.0.1Build2822 Buffer Overflow Vulnerability (high 7.8) - [CVE-2024-20722](https://insights.sbomify.com/CVE-2024-20722/): Adobe Substance 3D Painter v9.0.1Build2822 OOBR Vulnerability III (medium 5.5) - [CVE-2024-20721](https://insights.sbomify.com/CVE-2024-20721/): T5 Acrobat JS vulnerability - Exploitable crash via t5::javascript::get_page_num_words (medium 5.5) - [CVE-2024-20720](https://insights.sbomify.com/CVE-2024-20720/): Command injection in data collector backup due to insufficient patching of CVE-2023-38208 (critical 9.1) - [CVE-2024-2072](https://insights.sbomify.com/CVE-2024-2072/): SourceCodester Flashcard Quiz App update-flashcard.php cross site scripting (low 3.5) - [CVE-2024-20719](https://insights.sbomify.com/CVE-2024-20719/): [Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-29297 (critical 9.1) - [CVE-2024-20718](https://insights.sbomify.com/CVE-2024-20718/): [Spain] CSRF to delete Requisition Lists at Adobe Commerce (medium 4.3) - [CVE-2024-20717](https://insights.sbomify.com/CVE-2024-20717/): Stored admin XSS via PayPal authentication certificate (medium 5.4) - [CVE-2024-20716](https://insights.sbomify.com/CVE-2024-20716/): Force high-usage of resources by generating unlimited coupons: Adobe Commerce (medium 4.9) - [CVE-2024-20715](https://insights.sbomify.com/CVE-2024-20715/): Adobe Substance 3D Stager v2.1.1 Vulnerability VIII (medium 5.5) - [CVE-2024-20714](https://insights.sbomify.com/CVE-2024-20714/): Adobe Substance 3D Stager v2.1.1 Vulnerability V (medium 5.5) - [CVE-2024-20713](https://insights.sbomify.com/CVE-2024-20713/): Adobe Substance 3D Stager v2.1.1 Vulnerability IV (medium 5.5) - [CVE-2024-20712](https://insights.sbomify.com/CVE-2024-20712/): Adobe Substance 3D Stager v2.1.1 Vulnerability III (medium 5.5) - [CVE-2024-20711](https://insights.sbomify.com/CVE-2024-20711/): Adobe Substance 3D Stager v2.1.1 Vulnerability VII (medium 5.5) - [CVE-2024-20710](https://insights.sbomify.com/CVE-2024-20710/): Adobe Substance 3D Stager v2.1.1 Vulnerability I (medium 5.5) - [CVE-2024-2071](https://insights.sbomify.com/CVE-2024-2071/): SourceCodester FAQ Management System Update FAQ cross site scripting (low 3.5) - [CVE-2024-20709](https://insights.sbomify.com/CVE-2024-20709/): New Edge T5 MSRC Case [DCMSFT-1081] (medium 5.5) - [CVE-2024-20701](https://insights.sbomify.com/CVE-2024-20701/): SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability (high 8.8) - [CVE-2024-20700](https://insights.sbomify.com/CVE-2024-20700/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.5) - [CVE-2024-2070](https://insights.sbomify.com/CVE-2024-2070/): SourceCodester FAQ Management System add-faq.php cross site scripting (low 3.5) - [CVE-2024-20699](https://insights.sbomify.com/CVE-2024-20699/): Windows Hyper-V Denial of Service Vulnerability (medium 5.5) - [CVE-2024-20698](https://insights.sbomify.com/CVE-2024-20698/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-20697](https://insights.sbomify.com/CVE-2024-20697/): Windows libarchive Remote Code Execution Vulnerability (high 7.3) - [CVE-2024-20696](https://insights.sbomify.com/CVE-2024-20696/): Windows libarchive Remote Code Execution Vulnerability (high 7.3) - [CVE-2024-20695](https://insights.sbomify.com/CVE-2024-20695/): Skype for Business Information Disclosure Vulnerability (medium 5.7) - [CVE-2024-20694](https://insights.sbomify.com/CVE-2024-20694/): Windows CoreMessaging Information Disclosure Vulnerability (medium 5.5) - [CVE-2024-20693](https://insights.sbomify.com/CVE-2024-20693/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2024-20692](https://insights.sbomify.com/CVE-2024-20692/): Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability (medium 5.7) - [CVE-2024-20691](https://insights.sbomify.com/CVE-2024-20691/): Windows Themes Information Disclosure Vulnerability (medium 4.7) - [CVE-2024-20690](https://insights.sbomify.com/CVE-2024-20690/): Windows Nearby Sharing Spoofing Vulnerability (medium 6.5) - [CVE-2024-2069](https://insights.sbomify.com/CVE-2024-2069/): SourceCodester FAQ Management System delete-faq.php sql injection (medium 6.3) - [CVE-2024-20689](https://insights.sbomify.com/CVE-2024-20689/): Secure Boot Security Feature Bypass Vulnerability (high 7.1) - [CVE-2024-20688](https://insights.sbomify.com/CVE-2024-20688/): Secure Boot Security Feature Bypass Vulnerability (high 7.1) - [CVE-2024-20687](https://insights.sbomify.com/CVE-2024-20687/): Microsoft AllJoyn API Denial of Service Vulnerability (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/459/