oretnom23 computer laboratory management system

Name: oretnom23 computer laboratory management system
Brand: oretnom23

productUS

cpe:2.3:a:oretnom23:computer_laboratory_management_system:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

8critical3high6medium0low

updated 2026-10-27

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-34224US	—	0.87% (59th)	Exploit	no fix	2024-05-14	= 1.0
CVE-2024-40443US	—	0.77% (55th)	Exploit	no fix	2024-11-13	= 1.0
CVE-2024-34225US	—	0.57% (47th)	Exploit	no fix	2024-05-14	= 1.0
CVE-2024-3376US	critical9.8	1.34% (71st)	—	no fix	2024-04-06	= 1.0
CVE-2024-31546US	—	0.73% (54th)	—	no fix	2024-04-19	= 1.0
CVE-2024-3315US	critical9.8	0.72% (54th)	—	no fix	2024-04-04	= 1.0
CVE-2024-34479US	critical9.8	0.70% (53rd)	—	no fix	2024-08-07	= 1.0
CVE-2024-3377US	medium6.1	0.63% (50th)	—	no fix	2024-04-06	= 1.0
CVE-2024-3316US	high8.8	0.61% (49th)	—	no fix	2024-04-04	= 1.0
CVE-2024-3251US	high8.8	0.61% (49th)	—	no fix	2024-04-03	= 1.0
CVE-2024-31547US	—	0.61% (49th)	—	no fix	2024-04-19	= 1.0
CVE-2024-31545US	—	0.61% (49th)	—	no fix	2024-04-22	= 1.0
CVE-2024-3695US	medium5.4	0.60% (49th)	—	no fix	2024-04-12	= 1.0
CVE-2024-34480US	critical9.8	0.60% (48th)	—	no fix	2024-08-07	= 1.0
CVE-2024-41332US	medium6.5	0.60% (48th)	—	no fix	2024-08-12	= 1.0
CVE-2024-8348US	critical9.8	0.59% (48th)	—	no fix	2024-08-30	= 1.0
CVE-2024-8347US	critical9.8	0.59% (48th)	—	no fix	2024-08-30	= 1.0
CVE-2024-8346US	critical9.8	0.59% (48th)	—	no fix	2024-08-30	= 1.0
CVE-2024-3140US	medium5.4	0.55% (46th)	—	no fix	2024-04-01	= 1.0
CVE-2024-3314US	critical9.8	0.55% (46th)	—	no fix	2024-04-04	= 1.0
CVE-2024-54818US	—	0.53% (45th)	—	no fix	2025-01-08	= 1.0
CVE-2024-3131US	medium6.5	0.53% (44th)	—	no fix	2024-04-01	= 1.0
CVE-2025-45956US	—	0.49% (42nd)	—	no fix	2025-04-29	= 1.0
CVE-2024-3139US	medium5.4	0.49% (42nd)	—	no fix	2024-04-01	= 1.0
CVE-2024-31586US	—	0.48% (41st)	—	no fix	2024-06-20	= 1.0
CVE-2024-35583US	—	0.47% (41st)	—	no fix	2024-05-28	= 1.0
CVE-2024-31544US	—	0.44% (38th)	—	no fix	2024-04-09	= 1.0
CVE-2024-35581US	—	0.43% (37th)	—	no fix	2024-05-28	= 1.0
CVE-2024-35582US	—	0.42% (36th)	—	no fix	2024-05-28	= 1.0
CVE-2026-3770US	high8.8OT elevated	0.22% (13th)	—	no fix	2026-03-08	= 1.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')15 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-281Improper Preservation of Permissions1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan