# Vulnerabilities published in 2024


- [CVE-2024-20298](https://insights.sbomify.com/CVE-2024-20298/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-20297](https://insights.sbomify.com/CVE-2024-20297/): Cisco Adaptive Security Appliance and Firepower Threat Defense AnyConnect Access Control List Bypass Vulnerability (medium 5.8)
- [CVE-2024-20296](https://insights.sbomify.com/CVE-2024-20296/): File upload in Cisco Identity Services Engine Software (medium 4.7)
- [CVE-2024-20295](https://insights.sbomify.com/CVE-2024-20295/): Command injection in Cisco Unified Computing System (Standalone) (high 8.8)
- [CVE-2024-20294](https://insights.sbomify.com/CVE-2024-20294/): Denial of service in Cisco Firepower Extensible Operating System (FXOS) (medium 6.6)
- [CVE-2024-20293](https://insights.sbomify.com/CVE-2024-20293/): Security feature bypass in Cisco Adaptive Security Appliance (ASA) Software (medium 5.8)
- [CVE-2024-20292](https://insights.sbomify.com/CVE-2024-20292/): Information disclosure in Cisco Duo (medium 4.4)
- [CVE-2024-20291](https://insights.sbomify.com/CVE-2024-20291/): Security feature bypass in Cisco NX-OS Software (medium 5.8)
- [CVE-2024-20290](https://insights.sbomify.com/CVE-2024-20290/): Memory corruption in Cisco Secure Endpoint (high 7.5)
- [CVE-2024-2029](https://insights.sbomify.com/CVE-2024-2029/): Command Injection in mudler/localai (critical 9.8)
- [CVE-2024-20289](https://insights.sbomify.com/CVE-2024-20289/): Cisco NX-OS Software Command Injection Vulnerability (medium 4.4)
- [CVE-2024-20287](https://insights.sbomify.com/CVE-2024-20287/): Command injection in Cisco Business Wireless Access Point Software (medium 6.5)
- [CVE-2024-20286](https://insights.sbomify.com/CVE-2024-20286/): Cisco NX-OS Software Python Parser Escape Vulnerability (medium 5.3)
- [CVE-2024-20285](https://insights.sbomify.com/CVE-2024-20285/): Cisco NX-OS Software Python Parser Escape Vulnerability (medium 5.3)
- [CVE-2024-20284](https://insights.sbomify.com/CVE-2024-20284/): Cisco NX-OS Software Python Parser Escape Vulnerability (medium 5.3)
- [CVE-2024-20283](https://insights.sbomify.com/CVE-2024-20283/): Missing authorization in Cisco Nexus Dashboard (medium 4.3)
- [CVE-2024-20282](https://insights.sbomify.com/CVE-2024-20282/): Privilege escalation in Cisco Nexus Dashboard (medium 6.0)
- [CVE-2024-20281](https://insights.sbomify.com/CVE-2024-20281/): Cross-site request forgery in Cisco Data Center Network Manager (high 7.5)
- [CVE-2024-20280](https://insights.sbomify.com/CVE-2024-20280/): Cisco UCS Central Software Configuration Backup Static Key Vulnerability (medium 6.3)
- [CVE-2024-2028](https://insights.sbomify.com/CVE-2024-2028/): Cross-site scripting in Exclusive Addons for Elementor (medium 6.4)
- [CVE-2024-20279](https://insights.sbomify.com/CVE-2024-20279/): Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability (medium 4.3)
- [CVE-2024-20278](https://insights.sbomify.com/CVE-2024-20278/): Privilege escalation in Cisco IOS XE Software (medium 6.5)
- [CVE-2024-20277](https://insights.sbomify.com/CVE-2024-20277/): Command injection in Cisco ThousandEyes Recorder Application (medium 6.8)
- [CVE-2024-20276](https://insights.sbomify.com/CVE-2024-20276/): Denial of service in IOS (high 7.4)
- [CVE-2024-20275](https://insights.sbomify.com/CVE-2024-20275/): Cisco Secure Firewall Management Center Software Backup Cluster Command Injection Vulnerability (medium 6.8)
- [CVE-2024-20274](https://insights.sbomify.com/CVE-2024-20274/): Cisco Secure Firewall Management Center HTML Injection Vulnerability (medium 5.5)
- [CVE-2024-20273](https://insights.sbomify.com/CVE-2024-20273/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability (medium 6.1)
- [CVE-2024-20272](https://insights.sbomify.com/CVE-2024-20272/): File upload in Cisco Unity Connection (high 7.3)
- [CVE-2024-20271](https://insights.sbomify.com/CVE-2024-20271/): Denial of service in Cisco Aironet Access Point Software (high 8.6)
- [CVE-2024-20270](https://insights.sbomify.com/CVE-2024-20270/): Cross-site scripting in Cisco BroadWorks (medium 4.8)
- [CVE-2024-2027](https://insights.sbomify.com/CVE-2024-2027/): Cross-site scripting in Real Media Library: Media Library Folder & File Manager (medium 6.4)
- [CVE-2024-20269](https://insights.sbomify.com/CVE-2024-20269/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-20268](https://insights.sbomify.com/CVE-2024-20268/): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service Vulnerability (high 7.7)
- [CVE-2024-20267](https://insights.sbomify.com/CVE-2024-20267/): Denial of service in Cisco NX-OS Software (high 8.6)
- [CVE-2024-20266](https://insights.sbomify.com/CVE-2024-20266/): Null dereference in Cisco IOS XR Software (medium 5.3)
- [CVE-2024-20265](https://insights.sbomify.com/CVE-2024-20265/): Security feature bypass in Cisco Aironet Access Point Software (medium 5.9)
- [CVE-2024-20264](https://insights.sbomify.com/CVE-2024-20264/): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability (medium 4.8)
- [CVE-2024-20263](https://insights.sbomify.com/CVE-2024-20263/): Security feature bypass in Cisco Small Business Smart and Managed Switches (medium 5.8)
- [CVE-2024-20262](https://insights.sbomify.com/CVE-2024-20262/): Other in Cisco IOS XR Software (medium 6.5)
- [CVE-2024-20261](https://insights.sbomify.com/CVE-2024-20261/): Security feature bypass in Cisco Firepower Threat Defense Software (medium 5.8)
- [CVE-2024-20260](https://insights.sbomify.com/CVE-2024-20260/): Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (high 8.6)
- [CVE-2024-2026](https://insights.sbomify.com/CVE-2024-2026/): Passster <= 4.2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_protector Shortcode (medium 6.4)
- [CVE-2024-20259](https://insights.sbomify.com/CVE-2024-20259/): Memory corruption in Cisco IOS XE Software (high 8.6)
- [CVE-2024-20258](https://insights.sbomify.com/CVE-2024-20258/): Cross-site scripting in Cisco Secure Email (medium 6.1)
- [CVE-2024-20257](https://insights.sbomify.com/CVE-2024-20257/): Cross-site scripting in Cisco Secure Email (medium 4.8)
- [CVE-2024-20256](https://insights.sbomify.com/CVE-2024-20256/): Cross-site scripting in Cisco Secure Email and Web Manager (medium 4.8)
- [CVE-2024-20255](https://insights.sbomify.com/CVE-2024-20255/): Cross-site request forgery in Cisco TelePresence Video Communication Server (VCS) Expressway (high 8.2)
- [CVE-2024-20254](https://insights.sbomify.com/CVE-2024-20254/): Cross-site request forgery in Cisco TelePresence Video Communication Server (VCS) Expressway (critical 9.6)
- [CVE-2024-20253](https://insights.sbomify.com/CVE-2024-20253/): Deserialization in Cisco Packaged Contact Center Enterprise (critical 9.9)
- [CVE-2024-20252](https://insights.sbomify.com/CVE-2024-20252/): Cross-site request forgery in Cisco TelePresence Video Communication Server (VCS) Expressway (critical 9.6)
- [CVE-2024-20251](https://insights.sbomify.com/CVE-2024-20251/): Cross-site scripting in Cisco Identity Services Engine Software (medium 4.8)
- [CVE-2024-2025](https://insights.sbomify.com/CVE-2024-2025/): Deserialization in BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages (high 8.8)
- [CVE-2024-2024](https://insights.sbomify.com/CVE-2024-2024/): Folders Pro <= 3.0.2 - Authenticated(Author+) Arbitrary File Upload via handle_folders_file_upload (high 8.8)
- [CVE-2024-2023](https://insights.sbomify.com/CVE-2024-2023/): Folders <= 3.0 and Folders Pro <= 3.0.2 - Directory Traversal via handle_folders_file_upload (medium 4.3)
- [CVE-2024-2022](https://insights.sbomify.com/CVE-2024-2022/): Netentsec NS-ASG Application Security Gateway list_ipAddressPolicy.php sql injection (medium 6.3)
- [CVE-2024-2021](https://insights.sbomify.com/CVE-2024-2021/): Netentsec NS-ASG Application Security Gateway list_localuser.php sql injection (medium 6.3)
- [CVE-2024-2020](https://insights.sbomify.com/CVE-2024-2020/): Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2024-2019](https://insights.sbomify.com/CVE-2024-2019/): WP-DB-Table-Editor <= 1.8.4 - Missing Authorization to Authenticated(Contributor+) Database Access (high 7.5)
- [CVE-2024-2018](https://insights.sbomify.com/CVE-2024-2018/): WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection (high 8.8)
- [CVE-2024-2017](https://insights.sbomify.com/CVE-2024-2017/): Missing authorization in Countdown, Coming Soon, Maintenance – Countdown & Clock (medium 5.4)
- [CVE-2024-2016](https://insights.sbomify.com/CVE-2024-2016/): ZhiCms setcontroller.php index code injection (medium 6.3)
- [CVE-2024-20154](https://insights.sbomify.com/CVE-2024-20154/): Memory corruption in MT2735, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8666, MT8673, MT8675, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798 (high 8.8)
- [CVE-2024-20153](https://insights.sbomify.com/CVE-2024-20153/): Security feature bypass in MT2737, MT6989, MT6991, MT7925, MT8365, MT8518S, MT8532, MT8666, MT8667, MT8673, MT8676, MT8678, MT8755, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8796, MT8798, MT8893 (high 7.5)
- [CVE-2024-20152](https://insights.sbomify.com/CVE-2024-20152/): Denial of service in MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8755, MT8766, MT8768, MT8775, MT8781, MT8796, MT8798, MT8893 (medium 4.4)
- [CVE-2024-20151](https://insights.sbomify.com/CVE-2024-20151/): Memory corruption in MT2737, MT2739, MT6789, MT6813, MT6815, MT6835, MT6835T, MT6855, MT6878, MT6878T, MT6879, MT6886, MT6895, MT6895T, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6985, MT6986, MT6986D, MT6988, MT6989, MT6990, MT6991, MT8676, MT8678, MT8798, MT8863 (medium 6.7)
- [CVE-2024-20150](https://insights.sbomify.com/CVE-2024-20150/): Denial of service in MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863 (high 7.5)
- [CVE-2024-2015](https://insights.sbomify.com/CVE-2024-2015/): ZhiCms mcontroller.php getindexdata sql injection (medium 6.3)
- [CVE-2024-20149](https://insights.sbomify.com/CVE-2024-20149/): Denial of service in MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863 (high 7.5)
- [CVE-2024-20148](https://insights.sbomify.com/CVE-2024-20148/): Memory corruption in MT3603, MT6835, MT6878, MT6886, MT6897, MT7902, MT7920, MT7922, MT8518S, MT8532, MT8766, MT8768, MT8775, MT8796, MT8798 (critical 9.8)
- [CVE-2024-20147](https://insights.sbomify.com/CVE-2024-20147/): Denial of service in MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6985, MT6989, MT6990, MT7902, MT7920, MT7921, MT7922, MT7925, MT7927, MT8195, MT8370, MT8390, MT8395, MT8518S, MT8532, MT8678 (medium 5.3)
- [CVE-2024-20146](https://insights.sbomify.com/CVE-2024-20146/): Memory corruption in MT2737, MT3603, MT6835, MT6878, MT6886, MT6897, MT6990, MT7902, MT7920, MT7922, MT8365, MT8518S, MT8532, MT8666, MT8667, MT8673, MT8755, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788, MT8796, MT8798, MT8893 (high 8.1)
- [CVE-2024-20145](https://insights.sbomify.com/CVE-2024-20145/): Memory corruption in MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8676 (medium 6.6)
- [CVE-2024-20144](https://insights.sbomify.com/CVE-2024-20144/): Memory corruption in MT2737, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6880, MT6885, MT6886, MT6890, MT6893, MT6895, MT6897, MT6980, MT6985, MT6989, MT6990, MT8370, MT8390, MT8676 (medium 6.6)
- [CVE-2024-20143](https://insights.sbomify.com/CVE-2024-20143/): Memory corruption in MT2737, MT6781, MT6789, MT6835, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8370, MT8390, MT8676 (medium 6.6)
- [CVE-2024-20142](https://insights.sbomify.com/CVE-2024-20142/): Memory corruption in MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 (medium 6.2)
- [CVE-2024-20141](https://insights.sbomify.com/CVE-2024-20141/): Memory corruption in MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8175, MT8185, MT8195, MT8321, MT8362A, MT8365, MT8385, MT8395, MT8666, MT8667, MT8673, MT8675, MT8678, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8893 (medium 6.8)
- [CVE-2024-20140](https://insights.sbomify.com/CVE-2024-20140/): Memory corruption in MT6739, MT6761, MT6768, MT6781, MT6833, MT6853, MT6877, MT6885, MT6893, MT8518S, MT8532 (medium 6.7)
- [CVE-2024-2014](https://insights.sbomify.com/CVE-2024-2014/): Panabit Panalog sprog_upstatus.php sql injection (high 7.3)
- [CVE-2024-20139](https://insights.sbomify.com/CVE-2024-20139/): Denial of service in MT2737, MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8518S, MT8532, MT8678 (medium 6.5)
- [CVE-2024-20138](https://insights.sbomify.com/CVE-2024-20138/): Memory corruption in MT3605, MT6985, MT6989, MT6990, MT7925, MT7927, MT8195, MT8370, MT8390 (high 7.5)
- [CVE-2024-20137](https://insights.sbomify.com/CVE-2024-20137/): Denial of service in MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 (high 7.5)
- [CVE-2024-20136](https://insights.sbomify.com/CVE-2024-20136/): Memory corruption in MT2737, MT6781, MT6789, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8195, MT8370, MT8390, MT8673, MT8676, MT8678, MT8755, MT8775, MT8781, MT8795T, MT8796, MT8798, MT8893 (medium 6.2)
- [CVE-2024-20135](https://insights.sbomify.com/CVE-2024-20135/): Memory corruption in MT6768, MT6781, MT6833, MT6853, MT6877, MT6878, MT6893, MT6897, MT6989, MT8775, MT8796, MT9687 (medium 6.7)
- [CVE-2024-20134](https://insights.sbomify.com/CVE-2024-20134/): Memory corruption in MT6835, MT6878, MT6879, MT6895, MT6896, MT6897, MT6983, MT6985, MT6989, MT8755, MT8775, MT8796, MT8798 (medium 6.7)
- [CVE-2024-20133](https://insights.sbomify.com/CVE-2024-20133/): Memory corruption in MT6879, MT6886, MT6895, MT6895T, MT6896, MT6980, MT6983, MT8673, MT8676, MT8795T, MT8798 (medium 6.7)
- [CVE-2024-20132](https://insights.sbomify.com/CVE-2024-20132/): Memory corruption in MT2737, MT6298, MT6879, MT6886, MT6895, MT6895T, MT6896, MT6980, MT6980D, MT6983, MT6985, MT6989, MT6990, MT8673, MT8676, MT8795T, MT8798 (medium 6.7)
- [CVE-2024-20131](https://insights.sbomify.com/CVE-2024-20131/): Memory corruption in MT2737, MT2739, MT6789, MT6813, MT6815, MT6835, MT6835T, MT6855, MT6878, MT6878T, MT6879, MT6886, MT6895, MT6895T, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6985, MT6986, MT6986D, MT6988, MT6989, MT6990, MT6991, MT8673, MT8676, MT8795T, MT8798 (medium 6.7)
- [CVE-2024-20130](https://insights.sbomify.com/CVE-2024-20130/): Memory corruption in MT6739, MT6761, MT6765, MT6768, MT6781, MT6789, MT6833, MT6835, MT6853, MT6855, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6896, MT6897, MT6983, MT6985, MT6989, MT8195, MT8676, MT8678, MT8696, MT8796 (medium 6.7)
- [CVE-2024-2013](https://insights.sbomify.com/CVE-2024-2013/): Auth bypass in FOXMAN-UN (critical 10.0)
- [CVE-2024-20129](https://insights.sbomify.com/CVE-2024-20129/): Memory corruption in MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6896, MT6897, MT6983, MT6985, MT6989, MT8321, MT8666, MT8667, MT8673, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8797, MT8798, MT8863T (high 7.5)
- [CVE-2024-20128](https://insights.sbomify.com/CVE-2024-20128/): Memory corruption in MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6896, MT6897, MT6983, MT6985, MT6989, MT8321, MT8666, MT8667, MT8673, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8797, MT8798, MT8863T (high 7.5)
- [CVE-2024-20127](https://insights.sbomify.com/CVE-2024-20127/): Memory corruption in MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6878, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6896, MT6897, MT6983, MT6985, MT6989, MT8321, MT8666, MT8667, MT8673, MT8678, MT8765, MT8766, MT8766R, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8791T, MT8797, MT8798, MT8863T (high 7.5)
- [CVE-2024-20125](https://insights.sbomify.com/CVE-2024-20125/): Memory corruption in MT6580, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6886, MT6889, MT6893, MT6895, MT6983, MT6985, MT8175, MT8195, MT8321, MT8365, MT8370, MT8385, MT8390, MT8395, MT8666, MT8667, MT8673, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8791T, MT8797, MT8798 (medium 6.7)
- [CVE-2024-20124](https://insights.sbomify.com/CVE-2024-20124/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789 (medium 4.4)
- [CVE-2024-20123](https://insights.sbomify.com/CVE-2024-20123/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789 (medium 4.4)
- [CVE-2024-20122](https://insights.sbomify.com/CVE-2024-20122/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6785, MT8766, MT8768, MT8789 (medium 4.4)
- [CVE-2024-20121](https://insights.sbomify.com/CVE-2024-20121/): Memory corruption in MT6765, MT6768, MT6833, MT6835, MT6853, MT6855, MT6879, MT6886, MT6893, MT6983, MT6989, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798 (medium 6.7)
- [CVE-2024-20120](https://insights.sbomify.com/CVE-2024-20120/): Memory corruption in MT6765, MT6768, MT6833, MT6835, MT6853, MT6855, MT6879, MT6886, MT6893, MT6983, MT8321, MT8385, MT8755, MT8765, MT8766, MT8768, MT8771, MT8775, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8792, MT8795T, MT8796, MT8797, MT8798 (medium 6.7)
- [CVE-2024-2012](https://insights.sbomify.com/CVE-2024-2012/): Auth bypass in FOXMAN-UN (critical 9.1)
- [CVE-2024-20119](https://insights.sbomify.com/CVE-2024-20119/): Memory corruption in MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6835, MT6853, MT6855, MT6873, MT6877, MT6883, MT6885, MT6889, MT6893, MT8676 (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/463/