Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:08:53 +0000 cnvd-2020-14345 https://cve.radiocsirt.org/vuln/cnvd-2020-14345 cnvd-2020-14345 https://cve.radiocsirt.org/vuln/cnvd-2020-14345 EUVD-2026-38504 https://cve.radiocsirt.org/vuln/euvd-2026-38504 EUVD-2026-38504 https://cve.radiocsirt.org/vuln/euvd-2026-38504 fkie_cve-2020-8494 https://cve.radiocsirt.org/vuln/fkie_cve-2020-8494 <p>In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.</p> <p>In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-8494 GHSA-wm5j-9gpp-rpj9 https://cve.radiocsirt.org/vuln/ghsa-wm5j-9gpp-rpj9 <p>In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.</p> <p>In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privileges to gain unauthorized administrative privileges within the application via the emp_id, userid, pw1, pw2, supervisor, and timekeeper parameters.</p> https://cve.radiocsirt.org/vuln/ghsa-wm5j-9gpp-rpj9 gsd-2020-8494 https://cve.radiocsirt.org/vuln/gsd-2020-8494 gsd-2020-8494 https://cve.radiocsirt.org/vuln/gsd-2020-8494