CVE-2025-15563

CVE-2025-15563 affects NesterSoft WorkTime on-prem when an unauthenticated user can send a specific HTTP request to reset the WorkTime database configuration due to a broken access control. The underlying issue is lack of authorization checks for configuration changes exposed via HTTP. Consequenc...

CVE-2021-44874

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report modul...