CVE-2024-9040

A vulnerability, which was classified as problematic, was found in code-projects Blood Bank Management System 1.0. This affects an unknown part of the component Password Handler. The manipulation leads to cleartext storage in a file or on disk. An attack has to be approached locally.

• CWE-313
• CWE-312

• https://code-projects.org/Product
• https://vuldb.com/?ctiid.278211Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.278211Third Party Advisory, VDB Entry

Published

Sep 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9034A vulnerability was found in code-projects Patient Record Ma…7.3
• CVE-2024-9035A vulnerability was found in code-projects Blood Bank Manage…7.3
• CVE-2024-9036A vulnerability was found in itsourcecode Online Bookstore 1…6.3
• CVE-2024-9037A vulnerability classified as critical has been found in Cod…7.3
• CVE-2024-9038A vulnerability classified as problematic was found in Codez…9.8
• CVE-2024-9039A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-9041A vulnerability has been found in SourceCodester Best House …8.8
• CVE-2024-9042This CVE affects only Windows worker nodes. Your worker node…5.9
• CVE-2024-9043Secure Email Gateway from Cellopoint has Buffer Overflow Vul…9.8
• CVE-2024-9044A XML External Entity (XXE) vulnerability has been identifie…4.6
• CVE-2024-9046A DLL hijack vulnerability was reported in Lenovo stARstudio…7.8
• CVE-2024-9047The WordPress File Upload plugin for WordPress is vulnerable…9.8