https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1346.htmlhttps://patchthecve.com/cve/CVE-2024-1346.htmlWed, 17 Jun 2026 07:04:01 +0000MEDIUM 6.8: Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.https://patchthecve.com/cve/CVE-2024-1345.htmlhttps://patchthecve.com/cve/CVE-2024-1345.htmlWed, 17 Jun 2026 07:04:01 +0000MEDIUM 6.8: Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to perform a brute force attack and easily discover the root password.https://patchthecve.com/cve/CVE-2024-1344.htmlhttps://patchthecve.com/cve/CVE-2024-1344.htmlWed, 17 Jun 2026 07:04:01 +0000MEDIUM 6.8: Encrypted database credentials in LaborOfficeFree affecting version 19.10. This vulnerability allows an attacker to read and extract the username and password from the database of 'LOF_service.exe' and 'LaborOfficeFree.exe' located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This user chttps://patchthecve.com/cve/CVE-2024-1343.htmlhttps://patchthecve.com/cve/CVE-2024-1343.htmlWed, 17 Jun 2026 07:04:01 +0000MEDIUM 4.7: A weak permission was found in the backup directory in LaborOfficeFree affecting version 19.10. This vulnerability allows any authenticated user to read backup files in the directory '%programfiles(x86)% LaborOfficeFree BackUp'.