Approved changes feed: RSS · Atom
cpe:2.3:a:aenrich:a+hrd:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aenrich (bebdf35c-9222-5ffb-927c-024624a0ce65) |
|---|---|
| Product | A+Hrd (7fc4f999-2faf-5baa-8549-89929b9687a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-6834 |
vulnerable | 2026-06-08 08:07:05.120596 |
aEnrich｜a+HRD - Missing Authorization
MEDIUM (6.5)
The a+HRD developed by aEnrich has a Missing Authorization vulnerability, allowing authenticated remote attackers to arbitrarily read database contents through a specific API method.
Published: 2026-04-22T03:36:58.169Z
Updated: 2026-04-22T12:44:33.096Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-6833 |
vulnerable | 2026-06-08 08:07:05.120185 |
aEnrich｜a+HRD - SQL Injection
MEDIUM (6.5)
The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
Published: 2026-04-22T03:32:28.659Z
Updated: 2026-04-22T12:45:37.247Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12872 |
vulnerable | 2026-06-08 07:04:31.116770 |
aEnrich｜eHRD - Stored Cross-Site Scripting
MEDIUM (5.4)
The a+HRD and a+HCM developed by aEnrich has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to upload files containing malicious JavaScript code, which will execute on the client side when a user is tricked into visiting a specific URL.
Published: 2025-11-12T07:47:11.458Z
Updated: 2025-11-12T14:48:29.059Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12871 |
vulnerable | 2026-06-08 07:04:31.116237 |
aEnrich｜a+HRD - Authentication Abuse
CRITICAL (9.8)
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to craft administrator access tokens and use them to access the system with elevated privileges.
Published: 2025-11-12T07:38:30.394Z
Updated: 2025-11-12T17:01:46.367Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12870 |
vulnerable | 2026-06-08 07:04:31.115669 |
aEnrich｜eHRD - Authentication Abuse
CRITICAL (9.8)
The a+HRD developed by aEnrich has an Authentication Abuse vulnerability, allowing unauthenticated remote attackers to send crafted packets to obtain administrator access tokens and use them to access the system with elevated privileges.
Published: 2025-11-12T07:35:43.207Z
Updated: 2025-11-12T17:02:29.442Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12869 |
vulnerable | 2026-06-08 07:04:31.113670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20853 |
vulnerable | 2026-06-08 05:54:17.920167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20852 |
vulnerable | 2026-06-08 05:54:17.918300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39042 |
vulnerable | 2026-06-08 05:47:17.676416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39041 |
vulnerable | 2026-06-08 05:47:17.675945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39040 |
vulnerable | 2026-06-08 05:47:17.675445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-39039 |
vulnerable | 2026-06-08 05:47:17.672825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26676 |
vulnerable | 2026-06-08 05:41:52.802027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26675 |
vulnerable | 2026-06-08 05:41:52.800645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.