Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-25 CVE-2024-8011 Incorrect Authorization vulnerability in Logitech Options+
Logitech Options+ on MacOS prior 1.72 allows a local attacker to inject dynamic library within Options+ runtime and abuse permissions granted by the user to Options+ such as Camera.
local
low complexity
logitech CWE-863
5.5
2024-08-25 CVE-2024-42340 Unspecified vulnerability in Cyberark Identity
CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security
network
low complexity
cyberark
4.3
2024-08-25 CVE-2024-42337 Information Exposure vulnerability in Cyberark Identity
CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
network
low complexity
cyberark CWE-200
6.5
2024-08-25 CVE-2024-42338 Information Exposure vulnerability in Cyberark Identity
CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
network
low complexity
cyberark CWE-200
4.3
2024-08-25 CVE-2024-42339 Unspecified vulnerability in Cyberark Identity
CyberArk - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
network
low complexity
cyberark
4.3
2024-08-25 CVE-2024-8145 Cross-site Scripting vulnerability in Classcms 4.8
A vulnerability, which was classified as problematic, has been found in ClassCMS 4.8.
network
low complexity
classcms CWE-79
4.8
2024-08-25 CVE-2024-8144 Cross-site Scripting vulnerability in Classcms 4.8
A vulnerability classified as problematic was found in ClassCMS 4.8.
network
low complexity
classcms CWE-79
6.1
2024-08-25 CVE-2024-8142 Cross-site Scripting vulnerability in Rems Daily Calories Monitoring Tool 1.0
A vulnerability was found in SourceCodester Daily Calories Monitoring Tool 1.0.
network
low complexity
rems CWE-79
5.4
2024-08-25 CVE-2024-45244 Unspecified vulnerability in Hyperledger Fabric
Hyperledger Fabric through 2.5.9 does not verify that a request has a timestamp within the expected time window.
network
low complexity
hyperledger
5.3
2024-08-25 CVE-2024-8140 Cross-site Scripting vulnerability in Rems Task Progress Tracker 1.0
A vulnerability was found in SourceCodester Task Progress Tracker 1.0 and classified as problematic.
network
low complexity
rems CWE-79
5.4