# Vulnerabilities published in 2024


- [CVE-2024-20686](https://insights.sbomify.com/CVE-2024-20686/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-20685](https://insights.sbomify.com/CVE-2024-20685/): Azure Private 5G Core Denial of Service Vulnerability (medium 5.9)
- [CVE-2024-20684](https://insights.sbomify.com/CVE-2024-20684/): Windows Hyper-V Denial of Service Vulnerability (medium 6.5)
- [CVE-2024-20683](https://insights.sbomify.com/CVE-2024-20683/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-20682](https://insights.sbomify.com/CVE-2024-20682/): Windows Cryptographic Services Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-20681](https://insights.sbomify.com/CVE-2024-20681/): Windows Subsystem for Linux Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-20680](https://insights.sbomify.com/CVE-2024-20680/): Windows Message Queuing Client (MSMQC) Information Disclosure (medium 6.5)
- [CVE-2024-2068](https://insights.sbomify.com/CVE-2024-2068/): SourceCodester Computer Inventory System update-computer.php cross site scripting (low 3.5)
- [CVE-2024-20679](https://insights.sbomify.com/CVE-2024-20679/): Azure Stack Hub Spoofing Vulnerability (medium 6.5)
- [CVE-2024-20678](https://insights.sbomify.com/CVE-2024-20678/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2024-20677](https://insights.sbomify.com/CVE-2024-20677/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-20676](https://insights.sbomify.com/CVE-2024-20676/): Azure Storage Mover Remote Code Execution Vulnerability (high 8.0)
- [CVE-2024-20675](https://insights.sbomify.com/CVE-2024-20675/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 6.3)
- [CVE-2024-20674](https://insights.sbomify.com/CVE-2024-20674/): Windows Kerberos Security Feature Bypass Vulnerability (high 8.8)
- [CVE-2024-20673](https://insights.sbomify.com/CVE-2024-20673/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-20672](https://insights.sbomify.com/CVE-2024-20672/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2024-20671](https://insights.sbomify.com/CVE-2024-20671/): Microsoft Defender Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2024-20670](https://insights.sbomify.com/CVE-2024-20670/): Outlook for Windows Spoofing Vulnerability (high 8.1)
- [CVE-2024-2067](https://insights.sbomify.com/CVE-2024-2067/): SourceCodester Computer Inventory System delete-computer.php sql injection (medium 6.3)
- [CVE-2024-20669](https://insights.sbomify.com/CVE-2024-20669/): Secure Boot Security Feature Bypass Vulnerability (medium 6.7)
- [CVE-2024-20667](https://insights.sbomify.com/CVE-2024-20667/): Azure DevOps Server Remote Code Execution Vulnerability (high 7.5)
- [CVE-2024-20666](https://insights.sbomify.com/CVE-2024-20666/): BitLocker Security Feature Bypass Vulnerability (medium 6.6)
- [CVE-2024-20665](https://insights.sbomify.com/CVE-2024-20665/): BitLocker Security Feature Bypass Vulnerability (medium 6.1)
- [CVE-2024-20664](https://insights.sbomify.com/CVE-2024-20664/): Microsoft Message Queuing Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-20663](https://insights.sbomify.com/CVE-2024-20663/): Windows Message Queuing Client (MSMQC) Information Disclosure (medium 6.5)
- [CVE-2024-20662](https://insights.sbomify.com/CVE-2024-20662/): Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability (medium 4.9)
- [CVE-2024-20661](https://insights.sbomify.com/CVE-2024-20661/): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (high 7.5)
- [CVE-2024-20660](https://insights.sbomify.com/CVE-2024-20660/): Microsoft Message Queuing Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-2066](https://insights.sbomify.com/CVE-2024-2066/): SourceCodester Computer Inventory System add-computer.php cross site scripting (low 2.4)
- [CVE-2024-20659](https://insights.sbomify.com/CVE-2024-20659/): Windows Hyper-V Security Feature Bypass Vulnerability (high 7.1)
- [CVE-2024-20658](https://insights.sbomify.com/CVE-2024-20658/): Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-20657](https://insights.sbomify.com/CVE-2024-20657/): Windows Group Policy Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2024-20656](https://insights.sbomify.com/CVE-2024-20656/): Visual Studio Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-20655](https://insights.sbomify.com/CVE-2024-20655/): Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2024-20654](https://insights.sbomify.com/CVE-2024-20654/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.0)
- [CVE-2024-20653](https://insights.sbomify.com/CVE-2024-20653/): Microsoft Common Log File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2024-20652](https://insights.sbomify.com/CVE-2024-20652/): Windows HTML Platforms Security Feature Bypass Vulnerability (high 8.1)
- [CVE-2024-2065](https://insights.sbomify.com/CVE-2024-2065/): SourceCodester Barangay Population Monitoring System update-resident.php cross site scripting (low 3.5)
- [CVE-2024-2064](https://insights.sbomify.com/CVE-2024-2064/): rahman SelectCours Template CacheController.java getCacheNames injection (medium 4.3)
- [CVE-2024-2063](https://insights.sbomify.com/CVE-2024-2063/): SourceCodester Petrol Pump Management Software profile_crud.php cross site scripting (low 2.4)
- [CVE-2024-2062](https://insights.sbomify.com/CVE-2024-2062/): SourceCodester Petrol Pump Management Software edit_categories.php sql injection (medium 4.7)
- [CVE-2024-2061](https://insights.sbomify.com/CVE-2024-2061/): SourceCodester Petrol Pump Management Software edit_supplier.php sql injection (medium 4.7)
- [CVE-2024-2060](https://insights.sbomify.com/CVE-2024-2060/): SourceCodester Petrol Pump Management Software login_crud.php sql injection (medium 4.7)
- [CVE-2024-2059](https://insights.sbomify.com/CVE-2024-2059/): SourceCodester Petrol Pump Management Software service_crud.php unrestricted upload (medium 4.7)
- [CVE-2024-2058](https://insights.sbomify.com/CVE-2024-2058/): SourceCodester Petrol Pump Management Software product.php unrestricted upload (medium 4.7)
- [CVE-2024-2057](https://insights.sbomify.com/CVE-2024-2057/): LangChain langchain_community TFIDFRetriever tfidf.py load_local server-side request forgery (medium 6.3)
- [CVE-2024-2056](https://insights.sbomify.com/CVE-2024-2056/): Artica Proxy Loopback Services Remotely Accessible Unauthenticated (critical 9.8)
- [CVE-2024-2055](https://insights.sbomify.com/CVE-2024-2055/): Artica Proxy Unauthenticated File Manager Vulnerability (critical 9.8)
- [CVE-2024-20540](https://insights.sbomify.com/CVE-2024-20540/): Cisco Unified Contact Center Management Portal Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2024-2054](https://insights.sbomify.com/CVE-2024-2054/): Artica Proxy Unauthenticated PHP Deserialization Vulnerability (critical 9.8)
- [CVE-2024-20539](https://insights.sbomify.com/CVE-2024-20539/): Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-20538](https://insights.sbomify.com/CVE-2024-20538/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-20537](https://insights.sbomify.com/CVE-2024-20537/): Cisco Identity Services Engine Authorization Bypass Vulnerability (medium 6.5)
- [CVE-2024-20536](https://insights.sbomify.com/CVE-2024-20536/): Cisco Nexus Dashboard Fabric Controller SQL Injection Vulnerability (high 8.8)
- [CVE-2024-20534](https://insights.sbomify.com/CVE-2024-20534/): Cisco IP Phone 6800, 7800, 8800, and 9800 Series with Multiplatform Firmware Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-20533](https://insights.sbomify.com/CVE-2024-20533/): Cross-site scripting in Cisco IP Phones with Multiplatform Firmware (medium 4.8)
- [CVE-2024-20532](https://insights.sbomify.com/CVE-2024-20532/): Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability (medium 5.5)
- [CVE-2024-20531](https://insights.sbomify.com/CVE-2024-20531/): Cisco Identity Services Engine XML External Entity Injection Vulnerability (medium 5.5)
- [CVE-2024-20530](https://insights.sbomify.com/CVE-2024-20530/): Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-2053](https://insights.sbomify.com/CVE-2024-2053/): Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability (high 7.5)
- [CVE-2024-20529](https://insights.sbomify.com/CVE-2024-20529/): Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability (medium 5.5)
- [CVE-2024-20528](https://insights.sbomify.com/CVE-2024-20528/): Cisco Identity Services Engine Path Traversal Vulnerability (low 3.8)
- [CVE-2024-20527](https://insights.sbomify.com/CVE-2024-20527/): Cisco Identity Services Engine Arbitrary File Read and Delete Vulnerability (medium 5.5)
- [CVE-2024-20526](https://insights.sbomify.com/CVE-2024-20526/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (medium 5.3)
- [CVE-2024-20525](https://insights.sbomify.com/CVE-2024-20525/): Cisco Identity Services Engine Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-20524](https://insights.sbomify.com/CVE-2024-20524/): Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities (medium 6.8)
- [CVE-2024-20523](https://insights.sbomify.com/CVE-2024-20523/): Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities (medium 6.8)
- [CVE-2024-20522](https://insights.sbomify.com/CVE-2024-20522/): Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities (medium 6.5)
- [CVE-2024-20521](https://insights.sbomify.com/CVE-2024-20521/): Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities (medium 6.5)
- [CVE-2024-20520](https://insights.sbomify.com/CVE-2024-20520/): Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities (medium 6.5)
- [CVE-2024-2052](https://insights.sbomify.com/CVE-2024-2052/): Information disclosure in Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H (high 7.5)
- [CVE-2024-20519](https://insights.sbomify.com/CVE-2024-20519/): Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities (medium 6.5)
- [CVE-2024-20518](https://insights.sbomify.com/CVE-2024-20518/): Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities (medium 6.5)
- [CVE-2024-20517](https://insights.sbomify.com/CVE-2024-20517/): Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities (medium 6.8)
- [CVE-2024-20516](https://insights.sbomify.com/CVE-2024-20516/): Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities (medium 6.8)
- [CVE-2024-20515](https://insights.sbomify.com/CVE-2024-20515/): Cisco Identity Services Engine Information Disclosure Vulnerability (medium 6.5)
- [CVE-2024-20514](https://insights.sbomify.com/CVE-2024-20514/): Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (medium 5.4)
- [CVE-2024-20513](https://insights.sbomify.com/CVE-2024-20513/): Weak cryptography in Cisco Meraki MX Firmware (medium 5.8)
- [CVE-2024-20512](https://insights.sbomify.com/CVE-2024-20512/): Cisco Unified Contact Center Management Portal Reflected Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-20511](https://insights.sbomify.com/CVE-2024-20511/): Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-20510](https://insights.sbomify.com/CVE-2024-20510/): Security feature bypass in Cisco IOS XE Software (medium 4.7)
- [CVE-2024-2051](https://insights.sbomify.com/CVE-2024-2051/): Auth bypass in Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H (critical 9.8)
- [CVE-2024-20509](https://insights.sbomify.com/CVE-2024-20509/): Race condition in Cisco Meraki MX Firmware (medium 5.8)
- [CVE-2024-20508](https://insights.sbomify.com/CVE-2024-20508/): Memory corruption in Cisco UTD SNORT IPS Engine Software (medium 5.8)
- [CVE-2024-20507](https://insights.sbomify.com/CVE-2024-20507/): Cisco Meeting Management Information Disclosure Vulnerability (medium 4.3)
- [CVE-2024-20506](https://insights.sbomify.com/CVE-2024-20506/): ClamAV Privilege Handling Escalation Vulnerability (medium 6.1)
- [CVE-2024-20505](https://insights.sbomify.com/CVE-2024-20505/): ClamAV Memory Handling DoS (medium 4.0)
- [CVE-2024-20504](https://insights.sbomify.com/CVE-2024-20504/): Cross-site scripting in Cisco Secure Email (medium 5.4)
- [CVE-2024-20503](https://insights.sbomify.com/CVE-2024-20503/): Cisco Duo Epic for Hyperdrive Information Disclosure Vulnerability (medium 5.5)
- [CVE-2024-20502](https://insights.sbomify.com/CVE-2024-20502/): Denial of service in Cisco Meraki MX Firmware (medium 5.8)
- [CVE-2024-20501](https://insights.sbomify.com/CVE-2024-20501/): Memory corruption in Cisco Meraki MX Firmware (high 8.6)
- [CVE-2024-20500](https://insights.sbomify.com/CVE-2024-20500/): Denial of service in Cisco Meraki MX Firmware (medium 5.8)
- [CVE-2024-2050](https://insights.sbomify.com/CVE-2024-2050/): Cross-site scripting in Easergy T200 (DNP3) Models: T200I, T200E, T200P, T200S, T200H (high 8.2)
- [CVE-2024-20499](https://insights.sbomify.com/CVE-2024-20499/): Memory corruption in Cisco Meraki MX Firmware (high 8.6)
- [CVE-2024-20498](https://insights.sbomify.com/CVE-2024-20498/): Memory corruption in Cisco Meraki MX Firmware (high 8.6)
- [CVE-2024-20497](https://insights.sbomify.com/CVE-2024-20497/): Cisco Expressway Edge Improper Authorization Vulnerability (medium 4.3)
- [CVE-2024-20496](https://insights.sbomify.com/CVE-2024-20496/): Cisco SD-WAN vEdge Routers Denial of Service Vulnerability (medium 6.1)
- [CVE-2024-20495](https://insights.sbomify.com/CVE-2024-20495/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2024-20494](https://insights.sbomify.com/CVE-2024-20494/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2024-20493](https://insights.sbomify.com/CVE-2024-20493/): Denial of service in Cisco Adaptive Security Appliance (ASA) Software (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/460/