Linux Distros Unpatched Vulnerability : CVE-2021-21443

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x...

Linux Distros Unpatched Vulnerability : CVE-2017-16854

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use t...

MAL-2025-41523 Malicious code in @twork-data-services/proxy-prime-api-v6-customer-account-lite-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41511 Malicious code in @twork-data-services/proxy-invest-v2-api-v2-broker-account-customer-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41510 Malicious code in @twork-data-services/proxy-invest-v2-api-v1-customer-margin-attributes (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41502 Malicious code in @twork-data-services/proxy-cms-customer-pay-tokens (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41500 Malicious code in @twork-data-services/prime-customer-products (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41496 Malicious code in @twork-data-services/customer-storage-api-v5-customer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41495 Malicious code in @twork-data-services/customer-storage-api-v3-customer-timezone (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41494 Malicious code in @twork-data-services/customer-storage-api-v3-customer-attribute (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41493 Malicious code in @twork-data-services/customer-storage-api-v2-customer-email (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41492 Malicious code in @twork-data-services/customer-attribute-api-v3-customer-attribute-by-name (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41491 Malicious code in @twork-data-services/customer-api-v2-customer-vip-status (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41471 Malicious code in @twork-data-services/communication-api-v4-communication-customer-id (npm)

--- -= Per source details. Do not edit below this line.=-...

Linux Distros Unpatched Vulnerability : CVE-2018-11563

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary...

Linux Distros Unpatched Vulnerability : CVE-2024-32492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript...

Linux Distros Unpatched Vulnerability : CVE-2018-10198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal...

CVE-2025-9118 Dataform Path Traversal

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

CVE-2025-9118 Dataform Path Traversal

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...

CVE-2025-7827

The Ni WooCommerce Customer Product Report plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the niwoocpraction function in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with Subscriber-leve...