Lucene search
+L

1213 matches found

OSV
OSV
added 2022/05/20 6:5 p.m.22 views

CVE-2022-1770 Improper Privilege Management in polonel/trudesk

Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...

9.9CVSS9.3AI score0.02444EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/05/20 7:15 a.m.5 views

CVE-2022-1754

Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2...

8.4CVSS5.8AI score0.00999EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/20 12:0 a.m.4 views

Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from weak passwords...

9.8CVSS7.7AI score0.0214EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/05/20 12:0 a.m.6 views

Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from improper privilege management...

9.9CVSS8.3AI score0.02444EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/20 12:0 a.m.7 views

Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame, USA. A security vulnerability exists in versions prior to Trudesk 1.2.2, which stems from an improper restriction in the UI layer or frames...

8.4CVSS7.2AI score0.01559EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/05/16 2:32 p.m.32 views

CVE-2022-1718 The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service DoS via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service...

7.2CVSS7.5AI score0.01007EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/16 2:32 p.m.28 views

CVE-2022-1719 Reflected XSS on ticket filter function in polonel/trudesk

Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page...

5.5CVSS5.4AI score0.00703EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.6 views

Trudesk 输入验证错误漏洞

trudesk is an open source helpdesk/ticketing solution. A denial of service vulnerability exists in trudesk versions prior to 1.2.2, which stems from a lack of validation for password length and can be exploited by an attacker to cause a denial of service via a long password...

7.6CVSS6.8AI score0.00927EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.5 views

PT-2022-14071 · Trudesk · Trudesk

Name of the Vulnerable Software and Affected Versions: trudesk versions prior to 1.2.2 Description: The issue is related to a Reflected XSS in the ticket filter function, which can execute malicious javascript code in a web page. Recommendations: For versions prior to 1.2.2, update to version 1.2...

5.5CVSS5.4AI score0.00703EPSS
SaveExploits1References5
CNVD
CNVD
added 2022/05/16 12:0 a.m.21 views

Emlog Cross-Site Scripting Vulnerability (CNVD-2022-68881)

Emlog is a PHP and MySQL based CMS website building system. A security vulnerability exists in Emlog Pro version 1.2.2 and earlier, which can be exploited by a registered and logged-in attacker to launch cross-site scripting attacks...

3.5CVSS2.5AI score0.00574EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.4 views

PT-2022-14070 · Trudesk · Trudesk

Name of the Vulnerable Software and Affected Versions: trudesk versions prior to 1.2.2 Description: The trudesk application has an issue where large characters can be inserted into the Full Name input field on the signup page, allowing attackers to cause a Denial of Service DoS via a crafted HTTP...

7.5CVSS6.8AI score0.01007EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
added 2022/05/14 3:30 a.m.4 views

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1 <=1.2.2), com.evasion:Plugin-Junit (>=1.0.0.1 <=1.0.0.4) +182 more potentially affected by CVE-2013-1768 via org.apache.openjpa:openjpa (>=1.0.0 <=1.2.2)

org.apache.openjpa:openjpa MAVEN version =1.0.0, =1.2.1, =1.0.0.1, =0.1, =2.2, =2.2, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1, =2.1.4 and more Source cves: CVE-2013-1768 Source advisory: OSV:GHSA-J65F-MVGW-PRP2...

7.5CVSS7.1AI score0.09511EPSS
SaveExploits0
Snyk
Snyk
added 2022/05/14 2:22 a.m.2 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.57866EPSS
SaveExploits1References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.4 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.66919EPSS
SaveExploits1References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.3 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.64892EPSS
SaveExploits1References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.5 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.73289EPSS
SaveExploits5References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.6 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

8.8CVSS7AI score0.8249EPSS
SaveExploits7References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.4 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

8.8CVSS7AI score0.79687EPSS
SaveExploits7References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.5 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.15277EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/05/14 2:22 a.m.4 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.1628EPSS
SaveExploits0References2
Rows per page
Query Builder