Lucene search
+L

788 matches found

Exploit DB
Exploit DB
•added 2019/11/12 12:00 a.m.•117 views

Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting

Exploit Title: Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: Rishu Ranjan Vendor Homepage: https://www.myadrenalin.com/ Software Link: https://www.myadrenalin.com/core-hcm/ Version: 5.4.0 REQUIRED Tested on: NA CVE :...

6.1CVSS6.1AI score0.02607EPSS
SaveExploits5
exploitpack
exploitpack
•added 2019/11/12 12:00 a.m.•90 views

Adrenalin Core HCM 5.4.0 - prntDDLCntrlName Reflected Cross-Site Scripting

Adrenalin Core HCM 5.4.0 - prntDDLCntrlName Reflected Cross-Site Scripting Exploit Title: Adrenalin Core HCM 5.4.0 - 'prntDDLCntrlName' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: Rishu Ranjan Cy83rl0gger Vendor Homepage: https://www.myadrenalin.com/ Software...

4.3CVSS0.4AI score0.02607EPSS
SaveExploits5
exploitpack
exploitpack
•added 2019/11/12 12:00 a.m.•68 views

Adrenalin Core HCM 5.4.0 - strAction Reflected Cross-Site Scripting

Adrenalin Core HCM 5.4.0 - strAction Reflected Cross-Site Scripting Exploit Title: Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: Rishu Ranjan Cy83rl0gger Vendor Homepage: https://www.myadrenalin.com/ Software Link:...

4.3CVSS0.1AI score0.02946EPSS
SaveExploits5
zdt
zdt
•added 2019/11/12 12:00 a.m.•78 views

Adrenalin Core HCM 5.4.0 - (prntDDLCntrlName) Reflected Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Adrenalin Core HCM 5.4.0 - 'prntDDLCntrlName' Reflected Cross-Site Scripting Exploit Author: Rishu Ranjan Cy83rl0gger Vendor Homepage: https://www.myadrenalin.com/ Software Link: https://www.myadrenalin.com/core-hcm/ Version:...

4.3CVSS0.1AI score0.02607EPSS
SaveExploits5
Exploit DB
Exploit DB
•added 2019/11/12 12:00 a.m.•178 views

Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting

Exploit Title: Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting Google Dork: NA Date: 2018-09-06 Exploit Author: Rishu Ranjan Cy83rl0gger Vendor Homepage: https://www.myadrenalin.com/ Software Link: https://www.myadrenalin.com/core-hcm/ Version: 5.4.0 REQUIRED Tested on: NA C...

6.1CVSS6.1AI score0.02946EPSS
SaveExploits5
OSV
OSV
•added 2019/10/16 6:15 p.m.•14 views

CVE-2019-2951

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4.3CVSS5.8AI score0.01129EPSS
SaveExploits0References1
NVD
NVD
•added 2019/10/16 6:15 p.m.•36 views

CVE-2019-2951

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4.3CVSS2.9AI score0.01129EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/16 6:15 p.m.•18 views

Code injection

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4CVSS3.4AI score0.01129EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2019/10/16 5:40 p.m.•14 views

CVE-2019-2951

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

5AI score0.01129EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/10/16 5:40 p.m.•40 views

CVE-2019-2951

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

3.7AI score0.01129EPSS
SaveExploits0References1
CVE
CVE
•added 2019/10/16 5:40 p.m.•78 views

CVE-2019-2951

CVE-2019-2951 affects Oracle PeopleSoft Enterprise HCM Human Resources (US Federal Specific) 9.2. The vulnerability allows a low-privileged attacker with network access via HTTP to read a subset of data; CVSS 3.1 base score 4.3 (C:L, I:N, A:N). Connected sources (RH/CVE-2019-2951, NVD/NVD, CNVD, ...

4.3CVSS3.6AI score0.01129EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/10/16 12:00 a.m.•3 views

CVE-2019-2951: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft component: US Federal Specific. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpri...

4.3CVSS5.5AI score0.01129EPSS
SaveExploits0References1
Symantec
Symantec
•added 2019/10/15 12:00 a.m.•50 views

Oracle PeopleSoft Enterprise HCM Human Resources CVE-2019-2951 Remote Security Vulnerability

Description Oracle PeopleSoft Enterprise HCM Human Resources is prone to a remote security vulnerability. These vulnerabilities can be exploited over the 'HTTP' protocol. These vulnerabilities affect the following supported versions: 9.2 Technologies Affected Oracle PeopleSoft Enterprise HCM Huma...

0.2AI score0.01129EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2019/07/10 8:15 p.m.•34 views

CVE-2019-0325

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.9CVSS4.5AI score0.00792EPSS
SaveExploits0References3
Prion
Prion
•added 2019/07/10 8:15 p.m.•18 views

Authorization

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.9CVSS4.5AI score0.00792EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2019/07/10 7:04 p.m.•36 views

CVE-2019-0325

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.5AI score0.00792EPSS
SaveExploits0References3
CVE
CVE
•added 2019/07/10 7:04 p.m.•153 views

CVE-2019-0325

CVE-2019-0325 affects SAP ERP HCM (SAP_HRCES) v3.0. The vulnerability arises from missing authorization checks on a payroll-data report, allowing a user who once had payroll data access to retain access after revocation under certain conditions. Impact stated: potential unauthorized reading of pa...

4.9CVSS4.5AI score0.00792EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•4 views

CVE-2019-0325: Missing Authorization

SAP ERP HCM SAPHRCES , version 3, does not perform necessary authorization checks for a report that reads payroll data of employees in a certain area. Due to this under certain conditions, the user that once had authorization to payroll data of an employee, which was later revoked, may retain...

4.9CVSS5.8AI score0.00792EPSS
SaveExploits0References2
Symantec
Symantec
•added 2019/07/09 12:00 a.m.•37 views

SAP ERP HCM CVE-2019-0325 Remote Authorization Bypass Vulnerability

Description SAP ERP HCM Basis is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks. Technologies Affected SAP ERP HCM 3.0 Recommendations Block external access at the netwo...

4.9CVSS0.3AI score0.00792EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2019/05/16 3:29 p.m.•16 views

CVE-2019-11033

Applaud HCM 4.0.42+ uses HTML tag fields for HTML inputs in a form. This leads to an XSS vulnerability with a payload starting with the substring...

6.1CVSS6.3AI score0.00654EPSS
SaveExploits0References2
Rows per page
Query Builder