a+HRD vulnerabilities
3 known vulnerabilities in a+HRD from aEnrich Technology. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
a+HRD: Deserialization of Untrusted Data
The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution.
- 9.8 Critical severity
a+HRD: Improper Neutralization of Special Elements used in an SQL Command
The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 7.5 High severity
a+HRD: Improper Neutralization of Argument Delimiters in a Command
aEnrich Technology a+HRD's functionality for downloading files using youtube-dl.exe does not properly restrict user input. This allows attackers to pass arbitrary arguments to youtube-dl.exe, leading to the download of partial unauthorized files.