Lucene search
+L

24 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-16788

Malicious code in bioql PyPI...

8.8CVSS5.9AI score0.00638EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2024-33194

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00531EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/23 9:41 a.m.•15 views

CVE-2024-1011

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability affects unknown code of the file delete-leave.php of the component Leave Handler. The manipulation of the argument id leads to improper access controls. The attack can be...

8.8CVSS7.2AI score0.00638EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:19 a.m.•22 views

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS6.9AI score0.00531EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 1:19 a.m.•20 views

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS6.2AI score0.00578EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/31 10:15 p.m.•24 views

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.5CVSS5.4AI score0.00531EPSS
SaveExploits1References4
NVD
NVD
•added 2024/10/31 10:15 p.m.•38 views

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS0.00531EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/10/31 9:31 p.m.•18 views

CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS7.1AI score0.00531EPSS
SaveExploits1References4
CVE
CVE
•added 2024/10/31 9:31 p.m.•90 views

CVE-2024-10598

Tongda OA versions 11.2–11.6 are affected by a vulnerability in the Annual Leave Handler’s file general/hr/setting/attendance/leave/data.php, caused by improper authorization. The issue allows remote access and exploitation, with public exploits disclosed. Remediation per PT security guidance: up...

6.9CVSS5.7AI score0.00531EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/31 12:00 a.m.•23 views

PT-2024-16395 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 11.2 through 11.6 Description: A critical vulnerability was found in Tongda OA, affecting unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads t...

6.9CVSS5.9AI score0.00531EPSS
SaveExploits1References18
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/31 12:00 a.m.•7 views

CVE-2024-10598: Improper Authorization

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

6.9CVSS5.4AI score0.00531EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/29 5:15 p.m.•15 views

CVE-2024-1011

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability affects unknown code of the file delete-leave.php of the component Leave Handler. The manipulation of the argument id leads to improper access controls. The attack can be...

8.8CVSS4.9AI score0.00638EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/29 5:15 p.m.•30 views

Improper access control

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability affects unknown code of the file delete-leave.php of the component Leave Handler. The manipulation of the argument id leads to improper access controls. The attack can be...

4CVSS7.4AI score0.00638EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/29 5:00 p.m.•42 views

CVE-2024-1011 SourceCodester Employee Management System Leave delete-leave.php access control

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability affects unknown code of the file delete-leave.php of the component Leave Handler. The manipulation of the argument id leads to improper access controls. The attack can be...

4.3CVSS9AI score0.00638EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/29 12:00 a.m.•3 views

PT-2024-16032

Name of the Vulnerable Software and Affected Versions SourceCodester Employee Management System version 1.0 Description A problematic issue was found in the Leave Handler component, specifically in the delete-leave.php file. The id argument is vulnerable to manipulation, leading to improper acces...

8.8CVSS5.7AI score0.00638EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/29 12:00 a.m.•6 views

CVE-2024-1011: Improper Access Control

A vulnerability classified as problematic was found in SourceCodester Employee Management System 1.0. This vulnerability affects unknown code of the file delete-leave.php of the component Leave Handler. The manipulation of the argument id leads to improper access controls. The attack can be...

8.8CVSS5.3AI score0.00638EPSS
SaveExploits1References2
NVD
NVD
•added 2022/10/14 11:15 a.m.•25 views

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS0.00578EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/10/14 11:15 a.m.•18 views

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS3.9AI score0.00578EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/10/14 11:15 a.m.•18 views

CVE-2022-3502

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS3.8AI score0.00578EPSS
SaveExploits1References2
Prion
Prion
•added 2022/10/14 11:15 a.m.•27 views

Cross site scripting

A vulnerability was found in Human Resource Management System 1.0. It has been classified as problematic. This affects an unknown part of the component Leave Handler. The manipulation of the argument Reason leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

4.9CVSS5.2AI score0.00578EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder