https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:42:46.379891+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-14347 cnvd-2020-14347 2026-10-02T19:42:46.382865+00:00 cnvd-2020-14347 https://cve.radiocsirt.org/vuln/euvd-2026-38471 EUVD-2026-38471 2026-10-02T19:42:46.382897+00:00 EUVD-2026-38471 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8495 fkie_cve-2020-8495 2026-10-02T19:42:46.382912+00:00

In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unauthorized administrative privileges within the application via the delegate, delegateRole, and delegatorUserId parameters.

 https://cve.radiocsirt.org/vuln/ghsa-pjg7-vmgm-6qrp GHSA-pjg7-vmgm-6qrp 2026-10-02T19:42:46.382941+00:00

In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unauthorized administrative privileges within the application via the delegate, delegateRole, and delegatorUserId parameters.

 https://cve.radiocsirt.org/vuln/gsd-2020-8495 gsd-2020-8495 2026-10-02T19:42:46.382957+00:00 gsd-2020-8495