CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9573

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

CVE-2019-9573

The CVE-2019-9573 entry concerns the WordPress WP Human Resource Management plugin, specifically versions prior to 2.2.6. The public description states that the plugin mishandles leave applications, indicating a logic/authorization or data-handling issue in how leave requests are processed. CVSS ...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9574

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

PT-2019-19719

Name of the Vulnerable Software and Affected Versions WP Human Resource Management plugin versions prior to 2.2.6 Description The issue arises from the lack of proper role-based access control in the WP Human Resource Management plugin, allowing leave modifications to occur outside of the intende...

PT-2019-19718

Name of the Vulnerable Software and Affected Versions WP Human Resource Management plugin versions prior to 2.2.6 Description The issue is related to the mishandling of leave applications in the WP Human Resource Management plugin for WordPress. Recommendations For versions prior to 2.2.6, update...

CVE-2019-9574: Missing Authorization

The WP Human Resource Management plugin before 2.2.6 for WordPress does not ensure that a leave modification occurs in the context of the Administrator or HR Manager role...

CVE-2019-9573: Undefined Security Weakness

The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

The vulnerability of Human Interface Devices’ components in the Windows operating system, which allows a intruder to disclose protected information

The vulnerability of Human Interface Devices in the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

Beers with Talos Ep. #47: Privacy, Underwear, and Arias

Beers with Talos BWT Podcast Ep. 47 is now available. Download this episode and subscribe to Beers with Talos: If iTunes and Google Play aren't your thing, click here. Ep. 47 show notes: Recorded Feb. 15, 2019 We are joined by special guest Michelle Dennedy, a vice president and the chief privacy...

Payroll Provider Gives Extortionists a Payday

Payroll software provider Apex Human Capital Management suffered a ransomware attack this week that severed payroll management services for hundreds of the company's customers for nearly three days. Faced with the threat of an extended outage, Apex chose to pay the ransom demand and begin the...

CVE-2019-6543

AVEVA Software, LLC InduSoft Web Studio prior to Version 8.1 SP3 and InTouch Edge HMI formerly InTouch Machine Edition prior to Version 2017 Update. Code is executed under the program runtime privileges, which could lead to the compromise of the machine...

HID Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Human Interface Devices HID component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the victim’s system. To exploit the vulnerability, an attack...

Microsoft Windows Human Interface Devices CVE-2019-0600 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 f...

PT-2019-1444

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in the mechanisms for handling objects in memory within the Human Interface Devices component of the Windows operating system. This can be exploited by an...