Browse high-severity CVEs

Ehrd HIGH 8.8

CVE-2021-43359

Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a …

Mitigation only

Fix from $1,950 2021-12-01

Ehrd HIGH 8.8

CVE-2021-43360

Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authen…

Mitigation only

Fix from $1,950 2021-12-01

Ehrd HIGH 7.5

CVE-2021-43358

Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authent…

Mitigation only

Fix from $1,950 2021-12-01

Ehrd MEDIUM 6.5

CVE-2020-10510

Sunnet eHRD, a human training and development management system, contains a vulnerability of Broken Access Control. After login, attackers can use a …

Mitigation only

Fix from $1,600 2020-03-27

Ehrd MEDIUM 6.1

CVE-2020-10509

Sunnet eHRD, a human training and development management system, contains vulnerability of Cross-Site Scripting (XSS), attackers can inject arbitrary…

Mitigation only

Fix from $1,600 2020-03-27

Ehrd HIGH 7.5

CVE-2020-10508

Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confide…

No fix yet

Fix from $1,950 2020-03-27

Opensolaris MEDIUM 6.1

CVE-2016-1314

Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbi…

Mitigation only

Fix from $1,600 2016-03-28

Opensolaris MEDIUM 6.1

CVE-2016-1331

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary web scrip…

Mitigation only

Fix from $1,600 2016-02-15

Opensolaris MEDIUM 6.1

CVE-2016-1310

Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 11.5(0.199) allows remote attackers to inject arbitrary web script or HTML via a c…

Mitigation only

Fix from $1,600 2016-02-06

Opensolaris MEDIUM 6.1

CVE-2016-1306

Multiple cross-site scripting (XSS) vulnerabilities in Cisco Fog Director 1.0(0) allow remote attackers to inject arbitrary web script or HTML via a …

Mitigation only

Fix from $1,600 2016-02-06

Sunos MEDIUM 6.9

CVE-2014-4225

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors rela…

No fix yet

Fix from $1,600 2014-07-17

Sunos HIGH 7.8

CVE-2013-3748

Unspecified vulnerability in Oracle Solaris 11 allows remote attackers to affect availability via vectors related to Driver/IDM (iSCSI Data Mover).

No fix yet

Fix from $1,950 2013-07-17

Sunos HIGH 7.8

CVE-2013-3753

Unspecified vulnerability in Oracle Solaris 11 allows remote attackers to affect availability via vectors related to Kernel/STREAMS framework.

Mitigation only

Fix from $1,950 2013-07-17

Sunos HIGH 7.2

CVE-2013-3750

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related …

Mitigation only

Fix from $1,950 2013-07-17

Sunos HIGH 7.8

CVE-2012-3120

Unspecified vulnerability in Oracle Sun Solaris 8 allows remote attackers to affect availability, related to TCP/IP.

No fix yet

Fix from $1,950 2012-07-17

Sunos HIGH 7.1

CVE-2012-3125

Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows remote attackers to affect availability, related to TCP/IP.

Mitigation only

Fix from $1,950 2012-07-17

Sunos MEDIUM 5.4

CVE-2012-3127

Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to SCTP.

Mitigation only