CVE-2025-15563

The NesterSoft WorkTime on-prem project tracking software is vulnerable to a Broken Access Control issue. An unauthenticated user can reset the on-prem database configuration by sending a specific HTTP request to the WorkTime server due to a lack of authorization checks. This vulnerability may re...

CVE-2021-44874

Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Insecure design on report build via SQL query. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. The bi report modul...