Skip to main content
CVE-2024-13036 MEDIUM This Month

A vulnerability was found in code-projects Chat System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi PHP Chat System
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13035 MEDIUM This Month

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi PHP Chat System
NVD VulDB
CVSS 4.0
5.3
EPSS
0.4%
CVE-2024-13034 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2024-13033 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in code-projects Chat System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Chat System
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13058 MEDIUM This Month

An issue exists in SoftIron HyperCloud where authenticated, but non-admin users can create data pools, which could potentially impact the performance and availability of the backend software-defined. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Privilege Escalation
NVD
CVSS 4.0
4.8
EPSS
0.4%
CVE-2024-12993 MEDIUM This Month

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. Rated medium severity (CVSS 4.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVSS 4.0
4.8
EPSS
0.2%
CVE-2024-52294 MEDIUM PATCH This Month

Khoj is a self-hostable artificial intelligence app. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass
NVD GitHub
CVSS 3.1
4.3
EPSS
0.4%
CVE-2024-50701 MEDIUM PATCH This Month

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Teampass
NVD GitHub
CVSS 3.1
4.3
EPSS
0.3%
Prev Page 2 of 2

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy