Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

72 matches found

Positive Technologies
Positive Technologies•added 2024/12/26 12:0 a.m.•9 views

PT-2024-41137 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

10CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2024/12/26 12:0 a.m.•7 views

PT-2024-41135 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный отраженный HTML-код...

7.5CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2024/12/26 12:0 a.m.•11 views

PT-2024-41133 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, раскрыть защищаемую информацию...

6.8CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2024/12/26 12:0 a.m.•5 views

PT-2024-41138 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с недостаточной проверкой вводимых данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный HTML-код...

7.5CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2024/04/30 12:0 a.m.•12 views

PT-2024-41449 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с непринятием мер по нейтрализации специальных элементов, используемых в команде ОС. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные команды путём вызова метода из...

7.1CVSS7.3AI score
SaveExploits0References2
Positive Technologies
Positive Technologies•added 2024/04/30 12:0 a.m.•5 views

PT-2024-41445 · Ооо "Вебсофт Девелопмент" · Websoft Hcm

Уязвимость программного обеспечения автоматизации HR-процессов Websoft HCM связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, провести атаку межсайтового скриптинга XSS путём внедрения специально сформированного...

2.6CVSS6.9AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC•added 2024/01/30 12:0 a.m.•10 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in the lack of measures taken to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Websoft HCM’s automation software for HR processes is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers to execute cross-site scripting XSS attacks remotely...

6.4CVSS5.3AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC•added 2023/12/14 12:0 a.m.•10 views

The vulnerability of Websoft HCM’s automation solutions for HR processes stems from improper segmentation of access control. This allows a malicious user to create a new user account within the system.

The vulnerability of Websoft HCM’s automation solutions for HR processes is related to improper separation of access control. Exploiting this vulnerability allows a malicious actor to create a new user within the system...

7.8CVSS5.5AI score
SaveExploits0
Positive Technologies
Positive Technologies•added 2023/12/13 12:0 a.m.•7 views

PT-2023-7606 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to improper access control in the Websoft HCM system, which can be exploited by a remote attacker to create a new user in the system. Recommendations: At the moment...

7.8CVSS7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies•added 2023/11/21 12:0 a.m.•7 views

PT-2023-8459 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to a path traversal vulnerability in the Websoft HCM software, which can be exploited by a remote attacker to perform arbitrary file operations outside the intended...

6.8CVSS7.1AI score
SaveExploits0References2
NVD
NVD•added 2022/12/12 9:15 p.m.•27 views

CVE-2022-46905

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...

6.1CVSS0.00385EPSS
SaveExploits0References1
OSV
OSV•added 2022/12/12 9:15 p.m.•4 views

CVE-2022-46906

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...

5.4CVSS5.9AI score0.00341EPSS
SaveExploits0References1
NVD
NVD•added 2022/12/12 9:15 p.m.•36 views

CVE-2022-46903

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS...

5.4CVSS0.00341EPSS
SaveExploits0References1
NVD
NVD•added 2022/12/12 9:15 p.m.•31 views

CVE-2022-46906

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...

5.4CVSS0.00341EPSS
SaveExploits0References1
NVD
NVD•added 2022/12/12 9:15 p.m.•40 views

CVE-2022-46904

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS...

5.4CVSS0.00341EPSS
SaveExploits0References1
Prion
Prion•added 2022/12/12 9:15 p.m.•28 views

Cross site scripting

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...

4.9CVSS5.4AI score0.00341EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/12/12 9:15 p.m.•26 views

Cross site scripting

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS...

5.8CVSS6.3AI score0.00385EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/12/12 9:15 p.m.•21 views

Design/Logic Flaw

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS...

4.9CVSS5.4AI score0.00341EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2022/12/12 9:15 p.m.•17 views

Cross site scripting

Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS...

4.9CVSS5.3AI score0.00341EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies•added 2022/12/12 12:0 a.m.•7 views

PT-2022-28004 · Websoft · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: WebSoft HCM version 2021.2.3.327 Description: Insufficient processing of user input in WebSoft HCM allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the...

6.1CVSS7.5AI score0.00385EPSS
SaveExploits0References5
Rows per page
Query Builder