Skip to main content
CVE-2024-5377 May 26, 21:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Vehicle Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Vehicle Management System Warrendaloyan
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.9%
CVE-2024-5362 May 26, 12:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in SourceCodester Online Hospital Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Hospital Management System Warrendaloyan
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-5383 May 26, 23:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in lakernote EasyAdmin up to 20240324. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Easyadmin Lakernote
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-5381 May 26, 23:15 MEDIUM POC This Month

A vulnerability classified as critical was found in itsourcecode Student Information Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Information Management System Itsourcecode
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-5379 May 26, 22:15 MEDIUM POC This Month

A vulnerability was found in JFinalCMS up to 20240111. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Jfinalcms Heyewei
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5378 May 26, 22:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester School Intramurals Student Attendance Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School Intramurals Student Attendance Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-5376 May 26, 21:15 MEDIUM POC This Month

A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5375 May 26, 20:15 MEDIUM POC This Month

A vulnerability has been found in Kashipara College Management System 1.0 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5374 May 26, 20:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in Kashipara College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5373 May 26, 19:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in Kashipara College Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5372 May 26, 19:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in Kashipara College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5371 May 26, 18:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5370 May 26, 18:15 MEDIUM POC This Month

A vulnerability was found in Kashipara College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5369 May 26, 17:15 MEDIUM POC This Month

A vulnerability was found in Kashipara College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5368 May 26, 16:15 MEDIUM POC This Month

A vulnerability was found in Kashipara College Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5367 May 26, 15:15 MEDIUM POC This Month

A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS College Management System Lopalopa
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5366 May 26, 14:15 MEDIUM POC This Month

A vulnerability has been found in SourceCodester Best House Rental Management System up to 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Best House Rental Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-5365 May 26, 13:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in SourceCodester Best House Rental Management System up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Best House Rental Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-5364 May 26, 13:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in SourceCodester Best House Rental Management System up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Best House Rental Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-5363 May 26, 12:15 MEDIUM POC This Month

A vulnerability classified as critical was found in SourceCodester Best House Rental Management System up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Best House Rental Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-5356 May 26, 08:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in anji-plus AJ-Report up to 1.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Aj Report Anji Plus
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.0%
CVE-2024-5355 May 26, 06:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in anji-plus AJ-Report up to 1.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection Aj Report Anji Plus
NVD VulDB GitHub
CVSS 4.0
5.3
EPSS
3.2%
CVE-2024-5354 May 26, 05:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in anji-plus AJ-Report up to 1.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Aj Report Anji Plus
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.6%
CVE-2024-5353 May 26, 04:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in anji-plus AJ-Report up to 1.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Aj Report Anji Plus
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.8%
CVE-2024-5352 May 26, 01:15 MEDIUM POC This Month

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Aj Report Anji Plus
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.8%
CVE-2024-5351 May 26, 00:15 MEDIUM POC This Month

A vulnerability was found in anji-plus AJ-Report up to 1.4.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Deserialization Aj Report Anji Plus
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.8%
CVE-2024-5357 May 26, 08:15 MEDIUM This Month

A vulnerability has been found in PHPGurukul Zoo Management System 2.1 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP SQLi Zoo Management System Phpgurukul
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2024-31859 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper authorization checks which allows a member running a playbook in an existing channel to be promoted to a. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
6.3
EPSS
0.2%
CVE-2024-32045 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1, 8.1.x <= 8.1.12 fail to enforce proper access controls for channel and team membership when linking a playbook run to a channel which allows. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
5.9
EPSS
0.2%
CVE-2024-36255 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper input validation on post actions which allows an attacker to run a playbook checklist task command as. Rated medium severity (CVSS 5.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CSRF Mattermost Mattermost Server
NVD
CVSS 3.1
5.7
EPSS
0.2%
CVE-2024-36055 May 26, 23:15 MEDIUM This Month

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory with read/write access via the MmMapIoSpace API (IOCTL 0x9c40a4f8, 0x9c40a4e8,. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Denial Of Service
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2024-36056 May 26, 23:15 MEDIUM This Month

Hw64.sys in Marvin Test HW.exe before 5.0.5.0 allows unprivileged user-mode processes to arbitrarily map physical memory via IOCTL 0x9c406490 (for IoAllocateMdl, MmBuildMdlForNonPagedPool, and. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation
NVD
CVSS 3.1
5.4
EPSS
0.2%
CVE-2024-5380 May 26, 23:15 MEDIUM This Month

A vulnerability classified as problematic has been found in jsy-1 short-url 1.0.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-5361 May 26, 11:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Zoo Management System 2.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Zoo Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5360 May 26, 11:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Zoo Management System 2.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Zoo Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5359 May 26, 10:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Zoo Management System 2.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Zoo Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-5358 May 26, 09:15 MEDIUM This Month

A vulnerability was found in PHPGurukul Zoo Management System 2.1 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Zoo Management System Phpgurukul
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-4286 May 26, 23:15 MEDIUM This Month

Mintplex-Labs' anything-llm application is vulnerable to improper neutralization of special elements used in an expression language statement, identified in the commit id. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection
NVD GitHub
CVSS 3.0
4.9
EPSS
0.4%
CVE-2024-5272 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1, 8.1.x <= 8.1.12 fail to restrict the audience of the "custom_playbooks_playbook_run_updated" webhook event, which allows a guest on a channel with. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-5270 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.7.x <= 9.7.1, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to check if the email signup configuration option is enabled when a user requests to switch from SAML to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-36241 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to enforce proper access controls which allows user to view arbitrary post contents via the /playbook add slash command. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-34152 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to perform proper access control which allows a guest to get the metadata of a public playbook run that linked to the. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-34029 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.7.x <= 9.7.1 and 8.1.x <= 8.1.12 fail to perform a proper authorization check in the /api/v4/groups/<group-id>/channels/<channel-id>/link endpoint which allows a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Mattermost Mattermost Server
NVD
CVSS 3.1
4.3
EPSS
0.3%
CVE-2024-29215 May 26, 14:15 MEDIUM This Month

Mattermost versions 9.5.x <= 9.5.3, 9.7.x <= 9.7.1, 9.6.x <= 9.6.1, 8.1.x <= 8.1.12 fail to enforce proper access control which allows a user to run a slash command in a channel they are not a member. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
4.3
EPSS
0.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy