https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:43:56.771089+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-14345 cnvd-2020-14345 2026-10-03T06:43:56.879478+00:00 cnvd-2020-14345 https://cve.radiocsirt.org/vuln/euvd-2026-38504 EUVD-2026-38504 2026-10-03T06:43:56.879519+00:00 EUVD-2026-38504 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8494 fkie_cve-2020-8494 2026-10-03T06:43:56.879535+00:00

In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.

 https://cve.radiocsirt.org/vuln/ghsa-wm5j-9gpp-rpj9 GHSA-wm5j-9gpp-rpj9 2026-10-03T06:43:56.879568+00:00

In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.

 https://cve.radiocsirt.org/vuln/gsd-2020-8494 gsd-2020-8494 2026-10-03T06:43:56.879585+00:00 gsd-2020-8494