Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Horilla MEDIUM 6.1
CVE-2026-3049

A vulnerability was detected in horilla-opensource horilla up to 1.0.2. This issue affects the function get of the file horilla_generics/global_searc…

Fix: 1.0.3+
Fix from $1,600 2026-02-24
Horilla MEDIUM 5.4
CVE-2026-3050

A flaw has been found in horilla-opensource horilla up to 1.0.2. Impacted is an unknown function of the file static/assets/js/global.js of the compon…

Fix: 1.0.3+
Fix from $1,600 2026-02-24
Horilla HIGH 8.1
CVE-2026-24038

Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the OTP handling logic has a flawed equality check that …

No fix yet
Fix from $1,950 2026-01-22
Horilla MEDIUM 5.4
CVE-2026-24034

Horilla is a free and open source Human Resource Management System (HRMS). In versions prior to 1.5.0, a cross-site scripting vulnerability can be tr…

Fix: 1.5.0+
Fix from $1,600 2026-01-22
Horilla MEDIUM 5.4
CVE-2026-24037

Horilla is a free and open source Human Resource Management System (HRMS). In version 1.4.0, the has_xss() function attempts to block XSS by matching…

No fix yet
Fix from $1,600 2026-01-22
Horilla MEDIUM 5.3
CVE-2026-24036

Horilla is a free and open source Human Resource Management System (HRMS). Versions 1.4.0 and above expose unpublished job postings through the /recr…

Patch available
Fix from $1,600 2026-01-22
Horilla HIGH 8.0
CVE-2026-24010

Horilla is a free and open source Human Resource Management System (HRMS). A critical File Upload vulnerability in versions prior to 1.5.0, with Soci…

Fix: 1.5.0+
Fix from $1,950 2026-01-22
Horilla CRITICAL 9.9
CVE-2025-59832

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket …

Fix: 1.4.0+
Fix from $2,300 2025-09-25
Horilla MEDIUM 6.1
CVE-2025-59525

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, improper sanitization across the application allow…

Fix: 1.4.0+
Fix from $1,600 2025-09-24
Horilla MEDIUM 6.1
CVE-2025-59524

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, the file upload flow performs validation only in t…

Fix: 1.4.0+
Fix from $1,600 2025-09-24
Horilla HIGH 7.5
CVE-2025-48869

Horilla is a free and open source Human Resource Management System (HRMS). Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by…

No fix yet
Fix from $1,950 2025-09-24
Horilla HIGH 7.2
CVE-2025-48868

Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horil…

Patch available
Fix from $1,950 2025-09-24
Horilla MEDIUM 6.1
CVE-2025-47789

Horilla is a free and open source Human Resource Management System (HRMS). In versions up to and including 1.3, an attacker can craft a Horilla URL t…

Fix: 1.3.1+
Fix from $1,600 2025-05-15
Horilla HIGH 8.8
CVE-2024-12138

A vulnerability classified as critical was found in horilla up to 1.2.1. This vulnerability affects the function request_new/get_employee_shift/creat…

Fix: after 1.2.1
Fix from $1,950 2024-12-04