EUVD-2012-3964

Malware in sbrugna...

EUVD-2012-3965

Malware in sbrugna...

EUVD-2024-26119

Malicious code in bioql PyPI...

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

CVE-2024-28880

Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the product...

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

CVE-2024-28880

Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the product...

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

CVE-2024-29078

Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...

CVE-2024-28880

CVE-2024-28880 affects MosP kintai kanri, versions 4.6.6 and earlier. The issue is a path traversal vulnerability that allows a remote attacker who can log in to the product to obtain sensitive information. Multiple connected sources corroborate the affected product/version and describe the impac...

CVE-2024-28880

Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the product...

CVE-2024-28880

Path traversal vulnerability in MosP kintai kanri V4.6.6 and earlier allows a remote attacker who can log in to the product to obtain sensitive information of the product...

PT-2024-22704 · Unknown · Mosp Kintai Kanri

Name of the Vulnerable Software and Affected Versions: MosP kintai kanri versions 4.6.6 and earlier Description: The issue is related to incorrect permission assignment for a critical resource, which may allow a remote unauthenticated attacker with access to the product to alter the product...

esMind MosP 安全漏洞

esMind MosP is an open source attendance management system from esMind. A security vulnerability exists in esMind MosP kintai kanri 4.6.6 and earlier versions, which stems from the presence of path traversal and allows remote attackers to obtain sensitive information about the product...

PT-2024-22624 · Unknown · Mosp Kintai Kanri

Name of the Vulnerable Software and Affected Versions: MosP kintai kanri versions 4.6.6 and earlier Description: The issue allows a remote attacker who can log in to the product to obtain sensitive information. This is due to a path traversal vulnerability. Recommendations: For versions 4.6.6 and...

esMind MosP 安全漏洞

esMind MosP is an open source attendance management system from esMind. A security vulnerability exists in esMind MosP kintai kanri 4.6.6 and prior versions, which stems from incorrect privilege assignments and could allow an unauthenticated, remote attacker with privileged access to the product ...

JVN#97751842: Multiple vulnerabilities in MosP kintai kanri

MosP kintai kanri provided by esMind, LLC contains multiple vulnerabilities listed below. Path Traversal CWE-22 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Base Score 6.5 CVE-2024-28880 Incorrect Permission Assignment for Critical Resource CWE-732 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L Bas...

Code injection

MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users' information via unspecified vectors...

CVE-2012-4021

MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary user accounts, and consequently obtain sensitive information or modify settings, via unspecified vectors...

CVE-2012-4020

CVE-2012-4020 affects MosP kintai kanri prior to 4.1.0. The issue is that privilege requirements are not enforced, allowing remote authenticated users to read other users’ information via unspecified vectors. Impact is reading other users’ data; no exploitation details are provided. Remediation d...