# Vulnerabilities published in 2024


- [CVE-2024-20391](https://insights.sbomify.com/CVE-2024-20391/): Auth bypass in Cisco Secure Client (medium 6.8)
- [CVE-2024-20390](https://insights.sbomify.com/CVE-2024-20390/): Cisco IOS XR Software Dedicated XML Agent TCP Denial of Service Vulnerability (medium 5.3)
- [CVE-2024-2039](https://insights.sbomify.com/CVE-2024-2039/): Cross-site scripting in Stackable – Page Builder Gutenberg Blocks (medium 6.4)
- [CVE-2024-20389](https://insights.sbomify.com/CVE-2024-20389/): Privilege escalation in Cisco ConfD (high 7.8)
- [CVE-2024-20388](https://insights.sbomify.com/CVE-2024-20388/): Information disclosure in Cisco Firepower Management Center (medium 5.3)
- [CVE-2024-20387](https://insights.sbomify.com/CVE-2024-20387/): Cross-site scripting in Cisco Firepower Management Center (medium 5.4)
- [CVE-2024-20386](https://insights.sbomify.com/CVE-2024-20386/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2024-20385](https://insights.sbomify.com/CVE-2024-20385/): Cisco Nexus Dashboard Orchestrator SSL Certificate Validation Vulnerability (medium 5.9)
- [CVE-2024-20384](https://insights.sbomify.com/CVE-2024-20384/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.8)
- [CVE-2024-20383](https://insights.sbomify.com/CVE-2024-20383/): Cisco Secure Email and Web Manager Stored Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-20382](https://insights.sbomify.com/CVE-2024-20382/): Cross-site scripting in Cisco Adaptive Security Appliance (ASA) Software (medium 6.1)
- [CVE-2024-20381](https://insights.sbomify.com/CVE-2024-20381/): Cisco Network Services Orchestrator Configuration Update Authorization Bypass Vulnerability (high 8.8)
- [CVE-2024-20380](https://insights.sbomify.com/CVE-2024-20380/): ClamAV HTML Parser Denial of Service Vulnerability (high 7.5)
- [CVE-2024-2038](https://insights.sbomify.com/CVE-2024-2038/): Visual Website Collaboration, Feedback & Project Management – Atarim <= 3.22.6 - Hardcoded Credentials (high 7.5)
- [CVE-2024-20379](https://insights.sbomify.com/CVE-2024-20379/): Path traversal in Cisco Firepower Management Center (medium 6.5)
- [CVE-2024-20378](https://insights.sbomify.com/CVE-2024-20378/): Missing authorization in Cisco IP Phones with Multiplatform Firmware (high 7.5)
- [CVE-2024-20377](https://insights.sbomify.com/CVE-2024-20377/): Cross-site scripting in Cisco Firepower Management Center (medium 5.4)
- [CVE-2024-20376](https://insights.sbomify.com/CVE-2024-20376/): Memory corruption in Cisco IP Phones with Multiplatform Firmware (high 7.5)
- [CVE-2024-20375](https://insights.sbomify.com/CVE-2024-20375/): Memory corruption in Cisco Unified Communications Manager (high 8.6)
- [CVE-2024-20374](https://insights.sbomify.com/CVE-2024-20374/): Command injection in Cisco Firepower Management Center (medium 6.5)
- [CVE-2024-20373](https://insights.sbomify.com/CVE-2024-20373/): Cisco IOS and Cisco IOS XE SNMP Extended ACL Bypass Vulnerability (medium 5.3)
- [CVE-2024-20372](https://insights.sbomify.com/CVE-2024-20372/): Cross-site scripting in Cisco Firepower Management Center (medium 6.1)
- [CVE-2024-20371](https://insights.sbomify.com/CVE-2024-20371/): Cisco Nexus 3550-F Switches Access Control List Programming Vulnerability (medium 5.3)
- [CVE-2024-20370](https://insights.sbomify.com/CVE-2024-20370/): Privilege escalation in Cisco Adaptive Security Appliance (ASA) Software (medium 6.0)
- [CVE-2024-20369](https://insights.sbomify.com/CVE-2024-20369/): Open redirect in Cisco Network Services Orchestrator (medium 4.7)
- [CVE-2024-20368](https://insights.sbomify.com/CVE-2024-20368/): Cross-site request forgery in Cisco Identity Services Engine Software (medium 6.5)
- [CVE-2024-20367](https://insights.sbomify.com/CVE-2024-20367/): Cross-site scripting in Cisco Enterprise Chat and Email (medium 5.4)
- [CVE-2024-20366](https://insights.sbomify.com/CVE-2024-20366/): Privilege escalation in Cisco Network Services Orchestrator (high 7.8)
- [CVE-2024-20365](https://insights.sbomify.com/CVE-2024-20365/): Cisco Integrated Management Controller Redfish Command Injection Vulnerability (medium 6.5)
- [CVE-2024-20364](https://insights.sbomify.com/CVE-2024-20364/): Cross-site scripting in Cisco Firepower Management Center (medium 4.8)
- [CVE-2024-20363](https://insights.sbomify.com/CVE-2024-20363/): Security feature bypass in Cisco Firepower Threat Defense Software (medium 5.8)
- [CVE-2024-20362](https://insights.sbomify.com/CVE-2024-20362/): Cross-site scripting in Cisco Small Business RV Series Router Firmware (medium 6.1)
- [CVE-2024-20361](https://insights.sbomify.com/CVE-2024-20361/): Security feature bypass in Cisco Firepower Management Center (medium 5.8)
- [CVE-2024-20360](https://insights.sbomify.com/CVE-2024-20360/): SQL injection in Cisco Firepower Management Center (high 8.8)
- [CVE-2024-2036](https://insights.sbomify.com/CVE-2024-2036/): ApplyOnline – Application Form Builder and Manager <= 2.6.2 - Missing Authorization to Sensitive Information Exposure (medium 4.3)
- [CVE-2024-20359](https://insights.sbomify.com/CVE-2024-20359/): Cisco ASA and FTD Privilege Escalation (medium 6.0, exploited in the wild)
- [CVE-2024-20358](https://insights.sbomify.com/CVE-2024-20358/): Command injection in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (medium 6.0)
- [CVE-2024-20357](https://insights.sbomify.com/CVE-2024-20357/): Memory corruption in Cisco IP Phones with Multiplatform Firmware (medium 5.9)
- [CVE-2024-20356](https://insights.sbomify.com/CVE-2024-20356/): Command injection in Cisco Unified Computing System (Standalone) (high 8.7)
- [CVE-2024-20355](https://insights.sbomify.com/CVE-2024-20355/): Missing authorization in Cisco Adaptive Security Appliance (ASA) Software (medium 5.0)
- [CVE-2024-20354](https://insights.sbomify.com/CVE-2024-20354/): Denial of service in Cisco Aironet Access Point Software (medium 4.7)
- [CVE-2024-20353](https://insights.sbomify.com/CVE-2024-20353/): Cisco ASA and FTD Denial of Service (high 8.6, exploited in the wild)
- [CVE-2024-20352](https://insights.sbomify.com/CVE-2024-20352/): Path traversal in Cisco Emergency Responder (medium 4.9)
- [CVE-2024-20351](https://insights.sbomify.com/CVE-2024-20351/): Cisco Firepower Threat Defense Software Snort Firewall Denial of Service Vulnerability (high 8.6)
- [CVE-2024-20350](https://insights.sbomify.com/CVE-2024-20350/): Cisco Catalyst Center Static SSH Host Key Vulnerability (high 7.5)
- [CVE-2024-2035](https://insights.sbomify.com/CVE-2024-2035/): Improper Authorization in zenml-io/zenml (medium 6.5)
- [CVE-2024-20348](https://insights.sbomify.com/CVE-2024-20348/): Path traversal in Cisco Data Center Network Manager (high 7.5)
- [CVE-2024-20347](https://insights.sbomify.com/CVE-2024-20347/): Cross-site request forgery in Cisco Emergency Responder (medium 4.3)
- [CVE-2024-20346](https://insights.sbomify.com/CVE-2024-20346/): Cross-site scripting in Cisco AppDynamics (medium 5.4)
- [CVE-2024-20345](https://insights.sbomify.com/CVE-2024-20345/): Path traversal in Cisco AppDynamics (medium 6.5)
- [CVE-2024-20344](https://insights.sbomify.com/CVE-2024-20344/): Denial of service in Cisco Unified Computing System (Managed) (medium 5.3)
- [CVE-2024-20343](https://insights.sbomify.com/CVE-2024-20343/): Cisco IOS XR Software CLI Arbitrary File Read Vulnerability (medium 5.5)
- [CVE-2024-20342](https://insights.sbomify.com/CVE-2024-20342/): Cisco Firepower Threat Defense Software Rate Filter Bypass Vulnerability (medium 5.8)
- [CVE-2024-20341](https://insights.sbomify.com/CVE-2024-20341/): Cisco Adaptive Security Appliance WebVPN Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-20340](https://insights.sbomify.com/CVE-2024-20340/): SQL injection in Cisco Secure Firewall Management Center (FMC) (medium 6.5)
- [CVE-2024-20339](https://insights.sbomify.com/CVE-2024-20339/): Cisco Firepower Threat Defense Software for Firepower 2100 Series TLS Denial of Service Vulnerability (high 8.6)
- [CVE-2024-20338](https://insights.sbomify.com/CVE-2024-20338/): Privilege escalation in Cisco Secure Client (high 7.3)
- [CVE-2024-20337](https://insights.sbomify.com/CVE-2024-20337/): Other in Cisco Secure Client (high 8.2)
- [CVE-2024-20336](https://insights.sbomify.com/CVE-2024-20336/): Memory corruption in Cisco Business Wireless Access Point Software (medium 6.5)
- [CVE-2024-20335](https://insights.sbomify.com/CVE-2024-20335/): Command injection in Cisco Business Wireless Access Point Software (medium 6.5)
- [CVE-2024-20334](https://insights.sbomify.com/CVE-2024-20334/): Cross-site scripting in Cisco TelePresence Management Suite (TMS) (medium 5.5)
- [CVE-2024-20333](https://insights.sbomify.com/CVE-2024-20333/): Missing authorization in Cisco Digital Network Architecture Center (DNA Center) (medium 4.3)
- [CVE-2024-20332](https://insights.sbomify.com/CVE-2024-20332/): Server-side request forgery in Cisco Identity Services Engine Software (medium 5.5)
- [CVE-2024-20331](https://insights.sbomify.com/CVE-2024-20331/): Cisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS Vulnerability (medium 6.8)
- [CVE-2024-20330](https://insights.sbomify.com/CVE-2024-20330/): Memory corruption in Cisco Firepower Threat Defense Software (high 8.6)
- [CVE-2024-2033](https://insights.sbomify.com/CVE-2024-2033/): Video Conferencing with Zoom <= 4.4.5 - Sensitive Information Exposure (medium 4.3)
- [CVE-2024-20329](https://insights.sbomify.com/CVE-2024-20329/): Cisco Adaptive Security Appliance Software Remote Command Injection Vulnerability (critical 9.9)
- [CVE-2024-20328](https://insights.sbomify.com/CVE-2024-20328/): ClamAV VirusEvent File Processing Command Injection Vulnerability (medium 5.3)
- [CVE-2024-20327](https://insights.sbomify.com/CVE-2024-20327/): Denial of service in Cisco IOS XR Software (high 7.4)
- [CVE-2024-20326](https://insights.sbomify.com/CVE-2024-20326/): Command injection in Cisco ConfD (high 7.8)
- [CVE-2024-20325](https://insights.sbomify.com/CVE-2024-20325/): Missing authorization in Cisco Unified Intelligence Center (medium 5.1)
- [CVE-2024-20324](https://insights.sbomify.com/CVE-2024-20324/): Missing authorization in Cisco IOS XE Software (medium 5.5)
- [CVE-2024-20323](https://insights.sbomify.com/CVE-2024-20323/): Hardcoded credentials in Cisco Intelligent Node Manager (high 7.5)
- [CVE-2024-20322](https://insights.sbomify.com/CVE-2024-20322/): Security feature bypass in Cisco IOS XR Software (medium 5.8)
- [CVE-2024-20321](https://insights.sbomify.com/CVE-2024-20321/): Denial of service in Cisco NX-OS Software (high 8.6)
- [CVE-2024-20320](https://insights.sbomify.com/CVE-2024-20320/): Privilege escalation in Cisco IOS XR Software (high 7.8)
- [CVE-2024-2032](https://insights.sbomify.com/CVE-2024-2032/): Race Condition Vulnerability in zenml-io/zenml (low 3.1)
- [CVE-2024-20319](https://insights.sbomify.com/CVE-2024-20319/): Security feature bypass in Cisco IOS XR Software (medium 4.3)
- [CVE-2024-20318](https://insights.sbomify.com/CVE-2024-20318/): Denial of service in Cisco IOS XR Software (high 7.4)
- [CVE-2024-20317](https://insights.sbomify.com/CVE-2024-20317/): Cisco IOS XR Software Layer 2 Services Denial of Service Vulnerability (high 7.4)
- [CVE-2024-20316](https://insights.sbomify.com/CVE-2024-20316/): Security feature bypass in Cisco IOS XE Software (medium 5.8)
- [CVE-2024-20315](https://insights.sbomify.com/CVE-2024-20315/): Security feature bypass in Cisco IOS XR Software (medium 5.8)
- [CVE-2024-20314](https://insights.sbomify.com/CVE-2024-20314/): Denial of service in Cisco IOS XE Software (high 8.6)
- [CVE-2024-20313](https://insights.sbomify.com/CVE-2024-20313/): Memory corruption in Cisco IOS XE Software (high 7.4)
- [CVE-2024-20312](https://insights.sbomify.com/CVE-2024-20312/): Null dereference in Cisco IOS XE Software (high 7.4)
- [CVE-2024-20311](https://insights.sbomify.com/CVE-2024-20311/): Denial of service in Cisco IOS XE Software (high 8.6)
- [CVE-2024-20310](https://insights.sbomify.com/CVE-2024-20310/): Cross-site scripting in Cisco IOS XE Software (medium 6.1)
- [CVE-2024-2031](https://insights.sbomify.com/CVE-2024-2031/): Video Conferencing with Zoom <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 6.4)
- [CVE-2024-20309](https://insights.sbomify.com/CVE-2024-20309/): Denial of service in Cisco IOS XE Software (medium 5.6)
- [CVE-2024-20308](https://insights.sbomify.com/CVE-2024-20308/): Memory corruption in Cisco IOS XE Software (high 8.6)
- [CVE-2024-20307](https://insights.sbomify.com/CVE-2024-20307/): Memory corruption in Cisco IOS XE Software (medium 6.8)
- [CVE-2024-20306](https://insights.sbomify.com/CVE-2024-20306/): Command injection in Cisco IOS XE Software (medium 6.0)
- [CVE-2024-20305](https://insights.sbomify.com/CVE-2024-20305/): Cross-site scripting in Cisco Unity Connection (medium 4.8)
- [CVE-2024-20304](https://insights.sbomify.com/CVE-2024-20304/): Cisco IOS XR Software Packet Memory Exhaustion Vulnerability (high 8.6)
- [CVE-2024-20303](https://insights.sbomify.com/CVE-2024-20303/): Denial of service in Cisco IOS XE Software (high 7.4)
- [CVE-2024-20302](https://insights.sbomify.com/CVE-2024-20302/): Missing authorization in Cisco Nexus Dashboard Orchestrator (medium 5.4)
- [CVE-2024-20301](https://insights.sbomify.com/CVE-2024-20301/): Auth bypass in Cisco Duo (medium 6.2)
- [CVE-2024-20300](https://insights.sbomify.com/CVE-2024-20300/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-2030](https://insights.sbomify.com/CVE-2024-2030/): Cross-site scripting in Database for Contact Form 7, WPforms, Elementor forms (medium 6.4)
- [CVE-2024-20299](https://insights.sbomify.com/CVE-2024-20299/): Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability (medium 5.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/462/