LearningDigital Orca HCM digital learning platform 路径遍历漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. A path traversal vulnerability exists in the LearningDigital Orca HCM digital learning platform, which stems from the platform's directory listing page parameters not properly...

CVE-2021-35964: Improper Authorization

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the management function without logging in, access members’ information, modify and delete the courses in system, thus causing users fail to access the...

PT-2021-21083

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The issue concerns the upload function of the Orca HCM digital learning platform, where a specific parameter does not filter file formats. This allows remote...

LearningDigital Orca HCM digital learning platform 安全漏洞

LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. A security vulnerability exists in the Orca HCM digital learning platform, which stems from the platform's use of a weak factory default administrator password, which is hard-coded...

CVE-2021-35967: Improper Limitation of a Pathname to a Restricted Directory

The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thru Path Traversal without logging in...

CVE-2021-35968: Improper Limitation of a Pathname to a Restricted Directory

The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges...

PT-2021-21087

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The issue concerns the directory page parameter of the Orca HCM digital learning platform, which fails to filter special characters. This allows remote attackers ...

PT-2021-21088

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly, allowing remote attackers to access the...

CVE-2021-35963: Unrestricted Upload of File with Dangerous Type

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers to upload files containing malicious script to execute RCE attacks...

PT-2021-21086

Name of the Vulnerable Software and Affected Versions: Orca HCM digital learning platform affected versions not specified Description: The issue concerns a specific function of the Orca HCM digital learning platform that fails to filter input parameters properly, allowing the URL to be redirected...

CVE-2021-35965: Insufficiently Protected Credentials

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in...

LearningDigital Orca HCM digital learning platform 授权问题漏洞

LearningDigital Orca HCM digital learning platform is a digital learning platform from China's LearningDigital. The Orca HCM digital learning platform suffers from an authorization issue vulnerability, which stems from the lack of authentication on the administration page, which allows remote...

LearningDigital Orca HCM digital learning platform 输入验证错误漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. An input validation error vulnerability exists in the Orca HCM digital learning platform, which stems from a specific feature of the platform that does not properly filter input...

LearningDigital Orca HCM digital learning platform 路径遍历漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. The Orca HCM digital learning platform suffers from a Path Traversal vulnerability that arises from the platform's directory page parameters not filtering special characters. A...

CVE-2021-35966: URL Redirection to Untrusted Site

The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to any website. Remote attackers can use the vulnerability to execute phishing attacks...

Advisory ROSA-SA-2021-1942

Software: orca 3.6.3 OS: Cobalt 7.9 CVE-ID: CVE-2020-9298 CVE-Crit: HIGH CVE-DESC: The spinnaker template resolution feature is vulnerable to server-side request forgery SSRF, which allows an attacker to send requests on behalf of the spinnaker, potentially exposing sensitive data. CVE-STATUS:...

SUSE: Security Advisory (SUSE-SU-2015:2172-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Server-Side Request Forgery in Spinnaker Orca

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery SSRF, which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure...

GHSA-4FCW-PQ4R-F4Q7 Server-Side Request Forgery in Spinnaker Orca

The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery SSRF, which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive data disclosure...

[SECURITY] Fedora 34 Update: orca-40~rc-1.fc34

Orca is a screen reader that provides access to the graphical desktop via user-customizable combinations of speech and/or braille. Orca works with applications and toolkits that support the assistive technology service provider interface AT-SPI, e.g. the GNOME desktop...