Lucene search
+L

6537 matches found

RedhatCVE
RedhatCVE
added 2025/06/08 10:5 a.m.19 views

CVE-2025-48784

A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization...

8.8CVSS6.6AI score0.00316EPSS
SaveExploits1References1
NVD
NVD
added 2025/06/06 10:15 a.m.24 views

CVE-2025-5192

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions...

9.3CVSS0.00444EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/06 10:15 a.m.6 views

CVE-2025-48782

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file...

9.8CVSS6.2AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/06 10:15 a.m.8 views

CVE-2025-48780

A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object...

9.8CVSS6.2AI score0.0046EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 9:28 a.m.6 views

CVE-2025-48784 Soar Cloud HRD Human Resource Management System - Missing Authorization

A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to modify system settings without prior authorization...

8.8CVSS7.2AI score0.00316EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/06/06 9:27 a.m.28 views

CVE-2025-48783 Soar Cloud HRD Human Resource Management System - External Control of File Name or Path

An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to delete partial files by specifying arbitrary file paths...

8.8CVSS0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/06 9:24 a.m.28 views

CVE-2025-48782 Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file...

9.9CVSS0.00441EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 9:24 a.m.7 views

CVE-2025-48782 Soar Cloud HRD Human Resource Management System - Unrestricted Upload of File with Dangerous Type

An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a malicious file...

9.9CVSS8AI score0.00441EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/06 9:19 a.m.26 views

CVE-2025-48780 Soar Cloud HRD Human Resource Management System - Deserialization of Untrusted Data

A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to execute arbitrary system commands via a crafted serialized object...

9.9CVSS0.0046EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/06 9:15 a.m.8 views

CVE-2025-5192 Soar Cloud HRD Human Resource Management System - Missing Authentication for Critical Function

A missing authentication for critical function vulnerability in the client application of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attackers to bypass authentication and access application functions...

9.3CVSS7.4AI score0.00444EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2025/06/06 12:0 a.m.118 views

📄 HRM 1.0 2025 Cross Site Scripting

HRM version 1.0 2025 suffers from a cross site scripting vulnerability. Titles: HRM-1.0 2025 Cross-site scripting reflected Author: nu11secur1ty Date: 06/06/2025 Vendor: https://github.com/oretnom23 Software:...

6.6AI score
SaveExploits0
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.9 views

ZIV IDF 资源管理错误漏洞

The ZIV IDF is a transformer differential protection relay from ZIV Spain. A resource management error vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF version v0.10.0-0C03-04, which stems from uncontrolled consumption of resources and could lead to a denial of service attack...

8.7CVSS6.5AI score0.00336EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.9 views

Soar Cloud System Soar Cloud HRD Human Resource Management System 安全漏洞

Soar Cloud System Soar Cloud HRD Human Resource Management System is a human resource management system from Soar Cloud System, Inc. of Taiwan, China. A security vulnerability exists in Soar Cloud System Soar Cloud HRD Human Resource Management System version 7.3.2025.0408 and prior versions, whi...

8.8CVSS6.7AI score0.00316EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.10 views

The vulnerability of the at91_ts_register() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the at91tsregister function in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.0023EPSS
SaveExploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.12 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain unauthorized access to read, update, add, and delete data.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, update, add, and delete data using the HTTP protocol...

6.4CVSS7.2AI score0.00391EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.15 views

The vulnerability of the j1939_session_deactivate() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the j1939sessiondeactivate function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00231EPSS
SaveExploits0References12Affected Software9
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.10 views

Radare2 资源管理错误漏洞

Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A resource management error vulnerability exists in Radare2 version 5.9.9, which stems from a mishandling of the parameter -T by the function rconsflush in the component radare2, which could lead to reuse after release...

2.5CVSS4AI score0.00193EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.8 views

The vulnerability of the pci1xxxx gpio_irqu_handler() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pci1xxxx gpioirthandler function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00199EPSS
SaveExploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.11 views

The vulnerability of the function functionfsbind() in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the function functionfsbind in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00182EPSS
SaveExploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/06/04 12:0 a.m.7 views

The vulnerability of the init_events() and earlyTraceInit() functions in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the initevents and earlyTraceInit functions in the Linux operating system’s kernel is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00194EPSS
SaveExploits0References14Affected Software9
Rows per page
Query Builder