aEnrich Technology vulnerabilities
We track 3 vulnerabilities in aEnrich Technology products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 20, 2025.
Latest aEnrich Technology vulnerabilities
- 7.2 High severity
a+HRD: Deserialization of Untrusted Data
The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution.
- 9.8 Critical severity
a+HRD: Improper Neutralization of Special Elements used in an SQL Command
The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 7.5 High severity
a+HRD: Improper Neutralization of Argument Delimiters in a Command
aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user input. This allows attackers to pass arbitrary arguments to youtube-dl.exe, leading to the download of partial unauthorized files.