CVE search

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

766 results

ID	Severity	Summary	Published
CVE-2021-43360	高危8.8	Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.	01/12/2021
CVE-2021-43359	高危8.8	Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.	01/12/2021
CVE-2021-43358	高危7.5	Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.