Skip to main content
CVE-2024-7704 Aug 12, 21:15 MEDIUM POC This Month

A vulnerability was found in Weaver e-cology 8. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure E Cology Weaver
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-7682 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in code-projects Job Portal 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Job Portal Fabian
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-7681 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in code-projects College Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi College Management System College Management System Project
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2024-7662 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-7661 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-7645 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP CSRF Clinic S Patient Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2024-7637 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in code-projects Online Polling 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Polling Fabian
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.9%
CVE-2024-7636 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in code-projects Simple Ticket Booking 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Ticket Booking Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-7635 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in code-projects Simple Ticket Booking 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Ticket Booking Code Projects
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-7272 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in FFmpeg up to 5.1.5. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Heap Overflow Ffmpeg
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
1.1%
CVE-2024-6133 Aug 12, 13:38 MEDIUM POC This Month

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Wp Estore Tipsandtricks Hq
NVD WPScan
CVSS 3.1
6.5
EPSS
0.4%
CVE-2024-41332 Aug 12, 13:38 MEDIUM POC This Month

Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Computer Laboratory Management System Oretnom23
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2024-38200 Aug 12, 13:38 MEDIUM POC PATCH THREAT This Month

Microsoft Office Spoofing Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Microsoft 365 Apps Office Office Long Term Servicing Channel
NVD Exploit-DB
CVSS 3.1
6.5
EPSS
19.5%
CVE-2024-27443 Aug 12, 15:15 MEDIUM POC KEV THREAT This Month

An issue was discovered in Zimbra Collaboration (ZCS) 9.0 and 10.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Collaboration Zimbra
NVD
CVSS 3.1
6.1
EPSS
19.5%
CVE-2024-40484 Aug 12, 13:38 MEDIUM POC This Month

A Reflected Cross Site Scripting (XSS) vulnerability was found in "/oahms/search.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE Old Age Home Management System Phpgurukul
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2024-6136 Aug 12, 13:38 MEDIUM POC This Month

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Wp Estore Tipsandtricks Hq
NVD WPScan
CVSS 3.1
5.4
EPSS
0.2%
CVE-2024-6134 Aug 12, 13:38 MEDIUM POC This Month

The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Wp Estore Tipsandtricks Hq
NVD WPScan
CVSS 3.1
5.4
EPSS
0.4%
CVE-2024-42165 Aug 12, 13:38 MEDIUM POC This Month

Insufficiently random values for generating activation token in FIWARE Keyrock <= 8.4 allow attackers to activate accounts of any user by predicting the token for the activation link. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Keyrock Fiware
NVD
CVSS 3.1
5.4
EPSS
0.4%
CVE-2024-40481 Aug 12, 13:38 MEDIUM POC This Month

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/view-enquiry.php" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE Old Age Home Management System Phpgurukul
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2024-40478 Aug 12, 13:38 MEDIUM POC This Month

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin/afeedback.php" in Kashipara Online Exam System v1.0, which allows remote attackers to execute arbitrary code via "rname" and. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE Online Exam System Jayesh
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2024-40473 Aug 12, 13:38 MEDIUM POC This Month

A Stored Cross Site Scripting (XSS) vulnerability was found in "manage_houses.php" in SourceCodester Best House Rental Management System v1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS RCE Best House Rental Management System Mayurik
NVD GitHub
CVSS 3.1
5.4
EPSS
0.6%
CVE-2024-42478 Aug 12, 15:15 MEDIUM POC PATCH This Month

llama.cpp provides LLM inference in C/C++. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Information Disclosure Llama Cpp Ggml
NVD GitHub
CVSS 3.1
5.3
EPSS
0.5%
CVE-2024-7686 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7685 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7684 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability classified as problematic was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7683 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability classified as problematic has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7680 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in itsourcecode Tailoring Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Tailoring Management System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7678 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7677 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Car Driving School Management System Oretnom23
NVD VulDB GitHub
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7676 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7669 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7668 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-7667 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7666 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7665 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability classified as critical was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7664 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability classified as critical has been found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7663 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Car Driving School Management System Oretnom23
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7660 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS File Manager App Remyandrade
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-7644 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Leads Manager Tool 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Leads Manager Tool Rems
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.7%
CVE-2024-7643 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Leads Manager Tool Rems
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.9%
CVE-2024-7642 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.0%
CVE-2024-7641 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.9%
CVE-2024-7640 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.0%
CVE-2024-7639 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability classified as critical was found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.0%
CVE-2024-7638 Aug 12, 13:38 MEDIUM POC This Month

A vulnerability classified as critical has been found in SourceCodester Kortex Lite Advocate Office Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Microsoft Advocate Office Management System Mayurik
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.0%
CVE-2024-7706 Aug 12, 23:15 MEDIUM POC This Month

A vulnerability was found in Fujian mwcms 1.0.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

File Upload Mwcms
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.4%
CVE-2024-6158 Aug 12, 13:38 MEDIUM POC This Month

The Category Posts Widget WordPress plugin before 4.9.17, term-and-category-based-posts-widget WordPress plugin before 4.9.13 does not validate and escape some of its "Category Posts" widget settings. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Category Posts Widget Term And Category Based Posts Widget Zephyrwest
NVD WPScan
CVSS 3.1
4.8
EPSS
0.4%
CVE-2024-42164 Aug 12, 13:38 MEDIUM POC This Month

Insufficiently random values for generating password reset token in FIWARE Keyrock <= 8.4 allow attackers to disable two factor authorization of any user by predicting the token for the disable_2fa. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Keyrock Fiware
NVD
CVSS 3.1
4.3
EPSS
0.4%
CVE-2024-7658 Aug 12, 13:38 MEDIUM PATCH This Month

A vulnerability, which was classified as problematic, has been found in projectsend up to r1605.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP Information Disclosure Projectsend
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.8%
CVE-2024-6768 Aug 12, 19:15 MEDIUM This Month

A Denial of Service in CLFS.sys in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 allows a malicious authenticated low-privilege user to cause a. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service Microsoft
NVD VulDB
CVSS 4.0
6.8
EPSS
2.5%
Page 1 of 3 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy