Lucene search
K

54 matches found

RedhatCVE
RedhatCVE
added 2026/01/18 2:26 a.m.2 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS6.9AI score0.00021EPSS
Exploits0References1
OSV
OSV
added 2026/01/17 2:15 a.m.0 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

3.4CVSS5.8AI score0.00021EPSS
Exploits0References1
NVD
NVD
added 2026/01/17 2:15 a.m.2 views

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.00021EPSS
Exploits0References1
CVE
CVE
added 2026/01/17 1:13 a.m.6 views

CVE-2026-0519

CVE-2026-0519 : In Secure Access 12.70 and earlier than 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. This could allow any party with access to those logs to read the token and reuse it to access an integrated system. The provided ...

4.6CVSS6.6AI score0.00021EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2026/01/17 1:13 a.m.1 views

EUVD-2026-3161

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS6.5AI score0.00021EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/17 1:13 a.m.16 views

CVE-2026-0519 Information Disclosure in Secure Access Between 12.70 and 14.20

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system...

4.6CVSS0.00021EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-16266

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00052EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-23468

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.00221EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-16265

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00054EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-16264

Malicious code in bioql PyPI...

9.8CVSS7AI score0.00054EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-23466

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00246EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-36249

Malicious code in bioql PyPI...

5.5CVSS7AI score0.00016EPSS
Exploits0References5
OSV
OSV
added 2025/09/16 3:15 p.m.1 views

CVE-2025-56293

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...

5.4CVSS5.8AI score0.00048EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2025/09/16 12:0 a.m.3 views

CVE-2025-56293

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting XSS in the Add Child Information section in the Childs Name field...

5.7AI score0.00048EPSS
Exploits1References2
OSV
OSV
added 2025/08/31 8:15 p.m.0 views

CVE-2025-9743

A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file loginattendance2.php. Performing manipulation of the argument employeeid/date results in sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score
Exploits0References5
Cvelist
Cvelist
added 2025/08/31 7:2 p.m.6 views

CVE-2025-9742 code-projects Human Resource Integrated System login.php sql injection

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

7.5CVSS0.00047EPSS
Exploits1References5
CVE
CVE
added 2025/08/31 6:32 p.m.11 views

CVE-2025-9741

Summary: CVE-2025-9741 affects code-projects Human Resource Integrated System 1.0, specifically the /login_query12.php file. The issue is a SQL injection caused by lack of validation of the ID parameter in that file. An attacker can remotely exploit this vulnerability, and a public exploit exists...

7.5CVSS7.4AI score0.00049EPSS
Exploits1References5Affected Software1
CNNVD
CNNVD
added 2025/08/31 12:0 a.m.3 views

Code-Projects Human Resource Integrated System 安全漏洞

Human Resource Integrated System is a human resource management system. Human Resource Integrated System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter employeeid/date in the file loginattendance2.php. A...

9.8CVSS8.1AI score0.00066EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/08/05 6:35 a.m.3 views

CVE-2025-8501

A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack...

5.4CVSS3.7AI score0.00221EPSS
Exploits1References1
NVD
NVD
added 2025/08/03 6:15 a.m.2 views

CVE-2025-8501

A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected is an unknown function of the file /insert-and-view/action.php. The manipulation of the argument content leads to cross site scripting. It is possible to launch the attack...

5.4CVSS0.00221EPSS
Exploits1References5
Rows per page
Query Builder