# Vulnerabilities published in 2024


- [CVE-2024-57727](https://insights.sbomify.com/CVE-2024-57727/): SimpleHelp Path Traversal (critical 9.1, exploited in the wild)
- [CVE-2024-57726](https://insights.sbomify.com/CVE-2024-57726/): SimpleHelp Missing Authorization (critical 9.9, exploited in the wild)
- [CVE-2024-57725](https://insights.sbomify.com/CVE-2024-57725/): An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication, (medium 6.5)
- [CVE-2024-57724](https://insights.sbomify.com/CVE-2024-57724/): Denial of service in sammycage:lunasvg (medium 6.5)
- [CVE-2024-57723](https://insights.sbomify.com/CVE-2024-57723/): Memory corruption in sammycage:lunasvg (medium 6.5)
- [CVE-2024-57722](https://insights.sbomify.com/CVE-2024-57722/): Denial of service in sammycage:lunasvg (high 7.5)
- [CVE-2024-57721](https://insights.sbomify.com/CVE-2024-57721/): Memory corruption in sammycage:lunasvg (medium 6.5)
- [CVE-2024-57720](https://insights.sbomify.com/CVE-2024-57720/): Memory corruption in sammycage:lunasvg (medium 6.5)
- [CVE-2024-5772](https://insights.sbomify.com/CVE-2024-5772/): Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection (medium 5.3)
- [CVE-2024-57719](https://insights.sbomify.com/CVE-2024-57719/): Null dereference in sammycage:lunasvg (medium 6.5)
- [CVE-2024-57716](https://insights.sbomify.com/CVE-2024-57716/): AutoQueryable leaks sensitive information (high 7.5)
- [CVE-2024-5771](https://insights.sbomify.com/CVE-2024-5771/): LabVantage LIMS POST Request sql injection (medium 5.3)
- [CVE-2024-57708](https://insights.sbomify.com/CVE-2024-57708/): An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components. (medium 5.7)
- [CVE-2024-57707](https://insights.sbomify.com/CVE-2024-57707/): Code injection in dataease:dataease (critical 9.8)
- [CVE-2024-57704](https://insights.sbomify.com/CVE-2024-57704/): Memory corruption in tenda:ac8 firmware (medium 4.6)
- [CVE-2024-57703](https://insights.sbomify.com/CVE-2024-57703/): Memory corruption in tenda:ac8 firmware (high 7.3)
- [CVE-2024-5770](https://insights.sbomify.com/CVE-2024-5770/): WP Force SSL & HTTPS SSL Redirect <= 1.66 - Missing Authorization to Settings Update (medium 4.2)
- [CVE-2024-57699](https://insights.sbomify.com/CVE-2024-57699/): Netplex Json-smart Uncontrolled Recursion vulnerability (high 7.5)
- [CVE-2024-57698](https://insights.sbomify.com/CVE-2024-57698/): Missing authorization in modernwms:modernwms (high 7.5)
- [CVE-2024-57695](https://insights.sbomify.com/CVE-2024-57695/): Command injection in opswat:outpost security suite (high 7.7)
- [CVE-2024-5769](https://insights.sbomify.com/CVE-2024-5769/): MIMO Woocommerce Order Tracking <= 1.0.2 - Missing Authorization to Limited Settings Update (medium 4.3)
- [CVE-2024-57687](https://insights.sbomify.com/CVE-2024-57687/): Command injection in phpgurukul:land record system (critical 9.8)
- [CVE-2024-57686](https://insights.sbomify.com/CVE-2024-57686/): Cross-site scripting in phpgurukul:land record system (critical 9.8)
- [CVE-2024-57685](https://insights.sbomify.com/CVE-2024-57685/): Command injection in sparkshop:sparkshop (medium 5.3)
- [CVE-2024-57684](https://insights.sbomify.com/CVE-2024-57684/): Missing authorization in dlink:dir-816 firmware (critical 9.8)
- [CVE-2024-57683](https://insights.sbomify.com/CVE-2024-57683/): Missing authorization in dlink:dir-816 firmware (medium 4.3)
- [CVE-2024-57682](https://insights.sbomify.com/CVE-2024-57682/): Missing authorization in dlink:dir-816 firmware (medium 6.5)
- [CVE-2024-57681](https://insights.sbomify.com/CVE-2024-57681/): Missing authorization in dlink:dir-816 firmware (medium 5.3)
- [CVE-2024-57680](https://insights.sbomify.com/CVE-2024-57680/): Missing authorization in dlink:dir-816 firmware (medium 5.3)
- [CVE-2024-5768](https://insights.sbomify.com/CVE-2024-5768/): Missing authorization in MIMO Woocommerce Order Tracking (medium 6.4)
- [CVE-2024-57679](https://insights.sbomify.com/CVE-2024-57679/): Missing authorization in dlink:dir-816 firmware (medium 6.5)
- [CVE-2024-57678](https://insights.sbomify.com/CVE-2024-57678/): Missing authorization in dlink:dir-816 firmware (medium 6.5)
- [CVE-2024-57677](https://insights.sbomify.com/CVE-2024-57677/): Missing authorization in dlink:dir-816 firmware (medium 6.5)
- [CVE-2024-57676](https://insights.sbomify.com/CVE-2024-57676/): Missing authorization in dlink:dir-816 firmware (medium 6.5)
- [CVE-2024-57673](https://insights.sbomify.com/CVE-2024-57673/): Denial of service in projectfloodlight:floodlight (medium 5.5)
- [CVE-2024-57672](https://insights.sbomify.com/CVE-2024-57672/): Denial of service in projectfloodlight:floodlight (medium 5.5)
- [CVE-2024-5767](https://insights.sbomify.com/CVE-2024-5767/): Sitetweet <= 0.2 - Stored XSS via CSRF (high 8.8)
- [CVE-2024-57669](https://insights.sbomify.com/CVE-2024-57669/): Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the Bac (high 7.5)
- [CVE-2024-57668](https://insights.sbomify.com/CVE-2024-57668/): File upload in fabian:shopping portal (high 8.8)
- [CVE-2024-57665](https://insights.sbomify.com/CVE-2024-57665/): SQL injection in heyewei:jfinalcms (critical 9.8)
- [CVE-2024-57664](https://insights.sbomify.com/CVE-2024-57664/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57663](https://insights.sbomify.com/CVE-2024-57663/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57662](https://insights.sbomify.com/CVE-2024-57662/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57661](https://insights.sbomify.com/CVE-2024-57661/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57660](https://insights.sbomify.com/CVE-2024-57660/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-5766](https://insights.sbomify.com/CVE-2024-5766/): Likeshop Merchandise admin cross site scripting (medium 5.1)
- [CVE-2024-57659](https://insights.sbomify.com/CVE-2024-57659/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57658](https://insights.sbomify.com/CVE-2024-57658/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57657](https://insights.sbomify.com/CVE-2024-57657/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57656](https://insights.sbomify.com/CVE-2024-57656/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57655](https://insights.sbomify.com/CVE-2024-57655/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57654](https://insights.sbomify.com/CVE-2024-57654/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57653](https://insights.sbomify.com/CVE-2024-57653/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57652](https://insights.sbomify.com/CVE-2024-57652/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57651](https://insights.sbomify.com/CVE-2024-57651/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57650](https://insights.sbomify.com/CVE-2024-57650/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-5765](https://insights.sbomify.com/CVE-2024-5765/): WpStickyBar <= 2.1.0 - Unauthenticated SQLi (critical 9.8)
- [CVE-2024-57649](https://insights.sbomify.com/CVE-2024-57649/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57648](https://insights.sbomify.com/CVE-2024-57648/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57647](https://insights.sbomify.com/CVE-2024-57647/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57646](https://insights.sbomify.com/CVE-2024-57646/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57645](https://insights.sbomify.com/CVE-2024-57645/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57644](https://insights.sbomify.com/CVE-2024-57644/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57643](https://insights.sbomify.com/CVE-2024-57643/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57642](https://insights.sbomify.com/CVE-2024-57642/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57641](https://insights.sbomify.com/CVE-2024-57641/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57640](https://insights.sbomify.com/CVE-2024-57640/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-5764](https://insights.sbomify.com/CVE-2024-5764/): Nexus Repository 3 - Static hard-coded encryption passphrase used by default (medium 5.9)
- [CVE-2024-57639](https://insights.sbomify.com/CVE-2024-57639/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57638](https://insights.sbomify.com/CVE-2024-57638/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57637](https://insights.sbomify.com/CVE-2024-57637/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57636](https://insights.sbomify.com/CVE-2024-57636/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57635](https://insights.sbomify.com/CVE-2024-57635/): Denial of service in openlinksw:virtuoso (high 7.5)
- [CVE-2024-57634](https://insights.sbomify.com/CVE-2024-57634/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57633](https://insights.sbomify.com/CVE-2024-57633/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57632](https://insights.sbomify.com/CVE-2024-57632/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57631](https://insights.sbomify.com/CVE-2024-57631/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57630](https://insights.sbomify.com/CVE-2024-57630/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-5763](https://insights.sbomify.com/CVE-2024-5763/): Cross-site scripting in The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce (medium 6.4)
- [CVE-2024-57629](https://insights.sbomify.com/CVE-2024-57629/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57628](https://insights.sbomify.com/CVE-2024-57628/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57627](https://insights.sbomify.com/CVE-2024-57627/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57626](https://insights.sbomify.com/CVE-2024-57626/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57625](https://insights.sbomify.com/CVE-2024-57625/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57624](https://insights.sbomify.com/CVE-2024-57624/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57623](https://insights.sbomify.com/CVE-2024-57623/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57622](https://insights.sbomify.com/CVE-2024-57622/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57621](https://insights.sbomify.com/CVE-2024-57621/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57620](https://insights.sbomify.com/CVE-2024-57620/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-5762](https://insights.sbomify.com/CVE-2024-5762/): Zen Cart findPluginAdminPage Local File Inclusion Remote Code Execution Vulnerability (high 8.1)
- [CVE-2024-57619](https://insights.sbomify.com/CVE-2024-57619/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57618](https://insights.sbomify.com/CVE-2024-57618/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57617](https://insights.sbomify.com/CVE-2024-57617/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57616](https://insights.sbomify.com/CVE-2024-57616/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57615](https://insights.sbomify.com/CVE-2024-57615/): Denial of service in monetdb:monetdb (high 7.5)
- [CVE-2024-57611](https://insights.sbomify.com/CVE-2024-57611/): Cross-site request forgery in 07fly:07flycms (low 3.5)
- [CVE-2024-57610](https://insights.sbomify.com/CVE-2024-57610/): Security feature bypass in sylius:sylius (high 7.5)
- [CVE-2024-57609](https://insights.sbomify.com/CVE-2024-57609/): An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via (high 8.6)
- [CVE-2024-57608](https://insights.sbomify.com/CVE-2024-57608/): An issue in Via Browser 6.1.0 allows a a remote attacker to execute arbitrary code via the mark.via.Shell component. (medium 6.5)
- [CVE-2024-57606](https://insights.sbomify.com/CVE-2024-57606/): SQL injection in JeecgBoot (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/180/