# Vulnerabilities published in 2024


- [CVE-2024-1160](https://insights.sbomify.com/CVE-2024-1160/): Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link (medium 5.4)
- [CVE-2024-11599](https://insights.sbomify.com/CVE-2024-11599/): Domain Restriction Bypass on Registration (high 8.2)
- [CVE-2024-11598](https://insights.sbomify.com/CVE-2024-11598/): Privilege escalation in Application Control (high 7.8)
- [CVE-2024-11597](https://insights.sbomify.com/CVE-2024-11597/): Privilege escalation in Performance Manager (high 7.8)
- [CVE-2024-11596](https://insights.sbomify.com/CVE-2024-11596/): Buffer Over-read in Wireshark (high 7.8)
- [CVE-2024-11595](https://insights.sbomify.com/CVE-2024-11595/): Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (high 7.8)
- [CVE-2024-11592](https://insights.sbomify.com/CVE-2024-11592/): 1000 Projects Beauty Parlour Management System about-us.php sql injection (medium 6.9)
- [CVE-2024-11591](https://insights.sbomify.com/CVE-2024-11591/): 1000 Projects Beauty Parlour Management System add-services.php sql injection (medium 6.9)
- [CVE-2024-11590](https://insights.sbomify.com/CVE-2024-11590/): 1000 Projects Bookstore Management System forget_password_process.php sql injection (medium 6.9)
- [CVE-2024-1159](https://insights.sbomify.com/CVE-2024-1159/): Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content (medium 6.4)
- [CVE-2024-11589](https://insights.sbomify.com/CVE-2024-11589/): itsourcecode Tailoring Management System expcatedit.php sql injection (medium 5.3)
- [CVE-2024-11588](https://insights.sbomify.com/CVE-2024-11588/): AVL-DiTEST-DiagDev libdoip DoIPConnection.cpp reactOnReceivedTcpMessage null pointer dereference (medium 5.1)
- [CVE-2024-11587](https://insights.sbomify.com/CVE-2024-11587/): idcCMS classProvCity.php GetCityOptionJs cross site scripting (medium 5.3)
- [CVE-2024-11586](https://insights.sbomify.com/CVE-2024-11586/): Denial of service in Ubuntu's pulseaudio (medium 4.0)
- [CVE-2024-11585](https://insights.sbomify.com/CVE-2024-11585/): WP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion (high 7.5)
- [CVE-2024-11584](https://insights.sbomify.com/CVE-2024-11584/): Misconfiguration in cloud-init (medium 5.9)
- [CVE-2024-11583](https://insights.sbomify.com/CVE-2024-11583/): Missing authorization in Borderless – Addons and Templates for Elementor (medium 4.3)
- [CVE-2024-11582](https://insights.sbomify.com/CVE-2024-11582/): Cross-site scripting in Subscribe2 – Form, Email Subscribers & Newsletters (high 7.2)
- [CVE-2024-11581](https://insights.sbomify.com/CVE-2024-11581/): Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11580](https://insights.sbomify.com/CVE-2024-11580/): Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-1158](https://insights.sbomify.com/CVE-2024-1158/): Missing authorization in Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) (medium 4.3)
- [CVE-2024-11579](https://insights.sbomify.com/CVE-2024-11579/): Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11578](https://insights.sbomify.com/CVE-2024-11578/): Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11577](https://insights.sbomify.com/CVE-2024-11577/): Luxion KeyShot SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11576](https://insights.sbomify.com/CVE-2024-11576/): Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11575](https://insights.sbomify.com/CVE-2024-11575/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11574](https://insights.sbomify.com/CVE-2024-11574/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11573](https://insights.sbomify.com/CVE-2024-11573/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11572](https://insights.sbomify.com/CVE-2024-11572/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11571](https://insights.sbomify.com/CVE-2024-11571/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11570](https://insights.sbomify.com/CVE-2024-11570/): IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-1157](https://insights.sbomify.com/CVE-2024-1157/): Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL (medium 5.4)
- [CVE-2024-11569](https://insights.sbomify.com/CVE-2024-11569/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11568](https://insights.sbomify.com/CVE-2024-11568/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11567](https://insights.sbomify.com/CVE-2024-11567/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11566](https://insights.sbomify.com/CVE-2024-11566/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11565](https://insights.sbomify.com/CVE-2024-11565/): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11564](https://insights.sbomify.com/CVE-2024-11564/): IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11563](https://insights.sbomify.com/CVE-2024-11563/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11562](https://insights.sbomify.com/CVE-2024-11562/): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11561](https://insights.sbomify.com/CVE-2024-11561/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11560](https://insights.sbomify.com/CVE-2024-11560/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-1156](https://insights.sbomify.com/CVE-2024-1156/): Misconfiguration in FlexLogger (high 7.8)
- [CVE-2024-11559](https://insights.sbomify.com/CVE-2024-11559/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11558](https://insights.sbomify.com/CVE-2024-11558/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11557](https://insights.sbomify.com/CVE-2024-11557/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11556](https://insights.sbomify.com/CVE-2024-11556/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11555](https://insights.sbomify.com/CVE-2024-11555/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11554](https://insights.sbomify.com/CVE-2024-11554/): IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11553](https://insights.sbomify.com/CVE-2024-11553/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11552](https://insights.sbomify.com/CVE-2024-11552/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11551](https://insights.sbomify.com/CVE-2024-11551/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11550](https://insights.sbomify.com/CVE-2024-11550/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-1155](https://insights.sbomify.com/CVE-2024-1155/): Incorrect permissions for shared NI SystemLink Elixir based services (high 7.8)
- [CVE-2024-11549](https://insights.sbomify.com/CVE-2024-11549/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11548](https://insights.sbomify.com/CVE-2024-11548/): IrfanView DWG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11547](https://insights.sbomify.com/CVE-2024-11547/): IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11546](https://insights.sbomify.com/CVE-2024-11546/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11545](https://insights.sbomify.com/CVE-2024-11545/): IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11544](https://insights.sbomify.com/CVE-2024-11544/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11543](https://insights.sbomify.com/CVE-2024-11543/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11542](https://insights.sbomify.com/CVE-2024-11542/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11541](https://insights.sbomify.com/CVE-2024-11541/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11540](https://insights.sbomify.com/CVE-2024-11540/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11539](https://insights.sbomify.com/CVE-2024-11539/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11538](https://insights.sbomify.com/CVE-2024-11538/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11537](https://insights.sbomify.com/CVE-2024-11537/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11536](https://insights.sbomify.com/CVE-2024-11536/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11535](https://insights.sbomify.com/CVE-2024-11535/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11534](https://insights.sbomify.com/CVE-2024-11534/): IrfanView DXF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11533](https://insights.sbomify.com/CVE-2024-11533/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11532](https://insights.sbomify.com/CVE-2024-11532/): IrfanView DXF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11531](https://insights.sbomify.com/CVE-2024-11531/): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11530](https://insights.sbomify.com/CVE-2024-11530/): IrfanView CGM File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-1153](https://insights.sbomify.com/CVE-2024-1153/): SQL Injection Vulnerability in Talya Informatics' Travel APPS (medium 4.6)
- [CVE-2024-11529](https://insights.sbomify.com/CVE-2024-11529/): IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11528](https://insights.sbomify.com/CVE-2024-11528/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11527](https://insights.sbomify.com/CVE-2024-11527/): IrfanView DWG File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11526](https://insights.sbomify.com/CVE-2024-11526/): IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11525](https://insights.sbomify.com/CVE-2024-11525/): IrfanView DXF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11524](https://insights.sbomify.com/CVE-2024-11524/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11523](https://insights.sbomify.com/CVE-2024-11523/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11522](https://insights.sbomify.com/CVE-2024-11522/): IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11521](https://insights.sbomify.com/CVE-2024-11521/): IrfanView DJVU File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11520](https://insights.sbomify.com/CVE-2024-11520/): IrfanView ARW File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11519](https://insights.sbomify.com/CVE-2024-11519/): IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11518](https://insights.sbomify.com/CVE-2024-11518/): IrfanView RLE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11517](https://insights.sbomify.com/CVE-2024-11517/): IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11516](https://insights.sbomify.com/CVE-2024-11516/): IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11515](https://insights.sbomify.com/CVE-2024-11515/): IrfanView JPM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11514](https://insights.sbomify.com/CVE-2024-11514/): IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11513](https://insights.sbomify.com/CVE-2024-11513/): IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11512](https://insights.sbomify.com/CVE-2024-11512/): IrfanView WBZ Plugin WB1 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11511](https://insights.sbomify.com/CVE-2024-11511/): IrfanView XCF Plugin XCF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11510](https://insights.sbomify.com/CVE-2024-11510/): IrfanView WBZ plugin WB1 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-1151](https://insights.sbomify.com/CVE-2024-1151/): Kernel: stack overflow problem in open vswitch kernel module leading to dos (medium 5.5)
- [CVE-2024-11509](https://insights.sbomify.com/CVE-2024-11509/): IrfanView SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11508](https://insights.sbomify.com/CVE-2024-11508/): IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11507](https://insights.sbomify.com/CVE-2024-11507/): IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability (high 7.8)
- [CVE-2024-11506](https://insights.sbomify.com/CVE-2024-11506/): IrfanView DWG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/496/