Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/13 5:2 p.m.3 views

CVE-2025-14567

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS5.4AI score0.00147EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/12/12 4:2 p.m.22 views

CVE-2025-14567 haxxorsid Stock-Management-System employees missing authentication

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

6.9CVSS0.00147EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/12 4:2 p.m.3 views

CVE-2025-14567 haxxorsid Stock-Management-System employees missing authentication

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

6.9CVSS6.2AI score0.00147EPSS
Exploits1References4
CVE
CVE
added 2025/12/12 4:2 p.m.7 views

CVE-2025-14567

CVE-2025-14567 affects haxxorsid Stock-Management-System. Affected component is an authentication-sensitive area in the file /api/employees, where a missing authentication condition allows manipulation with remote reach. The description notes exploitation is possible remotely and that the vendor ...

7.5CVSS6.2AI score0.00147EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.4 views

PT-2025-50951

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0. This affects an unknown function of the file /api/employees. Executing manipulation can lead to missing authentication. It is possible to launch the attack remotely. The exploit has...

6.9CVSS6.5AI score0.00147EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/13 9:13 p.m.4 views

EUVD-2025-34097

WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. Prior to 3.5.1, a SQL Injection vulnerability was identified in the /html/funcionario/cadastrofuncionariopessoaexistente.php endpoint, specifically in the cpf parameter. This vulnerability allows...

8.6CVSS7.7AI score0.00044EPSS
Exploits1References2
Rows per page
Query Builder