Lucene search
K

28 matches found

CVE
CVE
added 2026/01/07 11:10 p.m.5 views

CVE-2026-21694

Titra (open‑source time tracking) has an Improper Access Control in versions 0.99.49 and earlier, enabling users to view/edit other users’ time entries in private projects. The issue affects the Titra APIs and is fixed in version 0.99.50. No exploitation details are provided in the sources; advis...

8.1CVSS6.3AI score0.00054EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/07 11:10 p.m.26 views

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

6.8CVSS0.00054EPSS
Exploits1References2
OSV
OSV
added 2026/01/07 11:10 p.m.1 views

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

6.8CVSS6.5AI score0.00054EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/10/27 12:0 a.m.3 views

CVE-2025-60291

An issue was discovered in eTimeTrackLite Web thru 12.0 20250704. There is a permission control flaw that allows unauthorized attackers to access specific routes and modify database connection configurations...

6.4AI score0.00043EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-0698

Malware in sbrugna...

5CVSS6.4AI score0.09894EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-0697

Malware in sbrugna...

7.5CVSS6.4AI score0.00816EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-0696

Malware in sbrugna...

4.3CVSS6.4AI score0.00527EPSS
Exploits0References7
OSV
OSV
added 2025/06/18 2:15 p.m.0 views

CVE-2025-46157

An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form...

9.9CVSS6.2AI score0.00887EPSS
Exploits2References3
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

TTS Software Time Tracking Software 3.0 Edituser.PHP Access Validation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16731/info Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the application. An attacker can exploit this...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2007/03/30 12:0 a.m.60 views

[ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

0.1AI score
Exploits0
seebug.org
seebug.org
added 2007/03/30 12:0 a.m.55 views

Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2007/03/29 12:0 a.m.19 views

Softerra Time-Assistant 6.2 - inc_dir Remote File Inclusion

Softerra Time-Assistant 6.2 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir...

7.5AI score
Exploits0
0day.today
0day.today
added 2007/03/29 12:0 a.m.22 views

Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications =================================================================== Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vuln =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2006/02/21 12:0 a.m.28 views

[eVuln] Time Tracking Software Multiple Vulnerabilities

New eVuln Advisory: Time Tracking Software Multiple Vulnerabilities http://evuln.com/vulns/69/summary.html --------------------Summary---------------- eVuln ID: EV0069 CVE: CVE-2006-0689 CVE-2006-0690 CVE-2006-0691 Vendor: TTS Software Software: Time Tracking Software Sowtware's Web Site:...

7.5CVSS0.3AI score0.09894EPSS
Exploits0
exploitpack
exploitpack
added 2006/02/20 12:0 a.m.15 views

TTS Software Time Tracking Software 3.0 - edituser.php Access Validation

TTS Software Time Tracking Software 3.0 - edituser.php Access Validation source: https://www.securityfocus.com/bid/16731/info Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2006/02/20 12:0 a.m.22 views

TTS Software Time Tracking Software 3.0 - &#039;edituser.php&#039; Access Validation

source: https://www.securityfocus.com/bid/16731/info Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the application. An attacker can exploit this vulnerability to modify user data in...

7.4AI score
Exploits0
NVD
NVD
added 2006/02/15 11:6 a.m.11 views

CVE-2006-0689

Cross-site scripting XSS vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...

4.3CVSS5.7AI score0.00527EPSS
Exploits0References6
Prion
Prion
added 2006/02/15 11:6 a.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter...

4.3CVSS6.1AI score0.00527EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2006/02/15 11:6 a.m.7 views

CVE-2006-0691

edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account...

5CVSS6.9AI score0.09894EPSS
Exploits0References7
Prion
Prion
added 2006/02/15 11:6 a.m.13 views

Sql injection

Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS9.1AI score0.00816EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder