Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Orca Hcm HIGH 8.8
CVE-2025-1389

Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read…

Fix: 11.0+
Fix from $1,950 2025-02-17
Orca Hcm CRITICAL 9.8
CVE-2025-1387

Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any…

Fix: 11.0+
Fix from $2,300 2025-02-17
Orca Hcm HIGH 8.8
CVE-2025-1388

Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web sh…

Fix: 11.0+
Fix from $1,950 2025-02-17
Orca Hcm MEDIUM 6.5
CVE-2024-8585

Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with reg…

Fix: 11.0+
Fix from $1,600 2024-09-09
Orca Hcm CRITICAL 9.8
CVE-2024-8584

Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to…

Fix: 11.0+
Fix from $2,300 2024-09-09
Orca Hcm CRITICAL 9.8
CVE-2021-35963

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated …

Fix: after 10.0
Fix from $2,300 2021-07-19
Orca Hcm CRITICAL 9.8
CVE-2021-35964

The management page of the Orca HCM digital learning platform does not perform identity verification, which allows remote attackers to execute the ma…

Fix: after 10.0
Fix from $2,300 2021-07-19
Orca Hcm CRITICAL 9.8
CVE-2021-35965

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in p…

Fix: after 10.0
Fix from $2,300 2021-07-19
Orca Hcm MEDIUM 6.1
CVE-2021-35966

The specific function of the Orca HCM digital learning platform does not filter input parameters properly, which causing the URL can be redirected to…

Fix: after 10.0
Fix from $1,600 2021-07-19
Orca Hcm MEDIUM 5.3
CVE-2021-35967

The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system dir…

Fix: after 10.0
Fix from $1,600 2021-07-19