Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2026/01/21 10:25 p.m.4 views

CVE-2026-21961

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.5AI score0.00046EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/21 12:31 a.m.6 views

EUVD-2026-3551

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.5AI score0.00046EPSS
Exploits0References2
OSV
OSV
added 2026/01/20 10:15 p.m.1 views

CVE-2026-21961

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS5.8AI score0.00046EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/20 9:56 p.m.2 views

CVE-2026-21961

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: Company Dir / Org Chart Viewer, Employee Snapshot. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS7.2AI score0.00046EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2013-0399

Malware in sbrugna...

4.3CVSS6.4AI score0.00311EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5636

Malicious code in bioql PyPI...

7.1CVSS6.6AI score0.00346EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/03/05 3:18 p.m.3 views

CVE-2025-25165

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in richardgabriel Staff Directory Plugin: Company Directory staff-directory-pro allows Stored XSS.This issue affects Staff Directory Plugin: Company Directory: from n/a through = 4.3...

7.1CVSS5.9AI score0.00346EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/03/05 9:21 a.m.7 views

CVE-2024-13839 Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function

The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject...

6.1CVSS0.00534EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/03/05 9:21 a.m.6 views

CVE-2024-13839 Company Directory <= 4.3 - Reflected Cross-Site Scripting via add_query_arg Function

The Staff Directory Plugin: Company Directory plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 4.3. This makes it possible for unauthenticated attackers to inject...

6.1CVSS6.5AI score0.00534EPSS
Exploits0References3
CVE
CVE
added 2025/03/03 1:30 p.m.44 views

CVE-2025-25165

CVE-2025-25165 affects WordPress Staff Directory Plugin: Company Directory (versions up to 4.3). Vulnerability: Stored XSS due to improper neutralization of input during web page generation. Impact/conditions: the issue is a cross-site scripting vulnerability described in multiple sources; the CV...

7.1CVSS5.9AI score0.00346EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.1 views

WordPress plugin Staff Directory Plugin: Company Directory 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. WordPress plugin Staff Directory Plugin: A cross-site...

7.1CVSS5.8AI score0.00346EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/02/02 4:8 p.m.2 views

WordPress Staff Directory Plugin: Company Directory Plugin <= 4.3 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Staff Directory Plugin: Company Directory versions = 4.3...

7.1CVSS6.1AI score0.00346EPSS
Exploits0Affected Software1
Hacker One
Hacker One
added 2023/01/16 5:20 p.m.16 views

8x8: Open Redirect - Polycom Company Directory

Vulnerability description not provided...

7.1AI score
Exploits0
Patchstack
Patchstack
added 2021/06/21 12:0 a.m.18 views

WordPress Staff Directory Plugin: Company Directory <= 3.6 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Jerome Bruandet NinTechNet in WordPress Staff Directory Plugin: Company Directory versions = 3.6. Solution Update the WordPress Staff Directory Plugin: Company Directory to the latest available version at least 4.0...

3.7AI score
Exploits0References2Affected Software1
CNVD
CNVD
added 2018/01/22 12:0 a.m.2 views

Oracle PeopleSoft Products PeopleSoft Enterprise HCM Human Resources Component Security Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM Human Resources is one of the human resource management components...

6.1CVSS6.6AI score0.00646EPSS
Exploits0References1
OSV
OSV
added 2018/01/18 2:29 a.m.2 views

CVE-2018-2654

Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Company Dir / Org Chart Viewer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS7.3AI score0.00646EPSS
Exploits0References3
NVD
NVD
added 2013/01/17 1:55 a.m.13 views

CVE-2013-0388

Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via unknown vectors related to Mobile Company Directory...

4.3CVSS5.8AI score0.00311EPSS
Exploits0References2
Prion
Prion
added 2013/01/17 1:55 a.m.17 views

Directory traversal

Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via unknown vectors related to Mobile Company Directory...

4.3CVSS6.3AI score0.00311EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2013/01/17 1:30 a.m.17 views

CVE-2013-0388

Unspecified vulnerability in the PeopleSoft HRMS component in Oracle PeopleSoft Products 9.1 allows remote attackers to affect integrity via unknown vectors related to Mobile Company Directory...

5.8AI score0.00311EPSS
Exploits0References2
Rows per page
Query Builder