Lucene search
+L

52 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:41 a.m.16 views

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

8.2CVSS7.9AI score0.00358EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:06 a.m.12 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

8.8CVSS8AI score0.00454EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/01 4:15 p.m.8 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

5.4CVSS6.1AI score0.00454EPSS
SaveExploits1References2
NVD
NVD
added 2024/11/01 4:15 p.m.46 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

8.8CVSS0.00454EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.6 views

Faveo Helpdesk 安全漏洞

Faveo Helpdesk is an open source ticketing system built on the Laravel framework by Ladybird Web Solution. Provides organizations with an automated helpdesk system to manage customer support. A security vulnerability exists in Faveo Helpdesk version 9.2.0 that originates from a remote attacker wh...

8.8CVSS7.9AI score0.00454EPSS
SaveExploits1References2
CVE
CVE
added 2024/11/01 12:00 a.m.71 views

CVE-2024-51377

CVE-2024-51377 affects Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) v9.2.0. The issue allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. In the connected sources, the vulnerability is documented across multiple feeds (including R...

8.8CVSS8AI score0.00454EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.11 views

PT-2024-34613 · Ladybird Web Solution · Ladybird Web Solution Faveo Helpdesk & Servicedesk

Name of the Vulnerable Software and Affected Versions: Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud version 9.2.0 Description: An issue in the software allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. This enables the attacker to...

8.8CVSS8.1AI score0.00454EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2024/11/01 12:00 a.m.42 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

0.00454EPSS
SaveExploits1References2
NVD
NVD
added 2024/10/22 10:15 p.m.37 views

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

8.2CVSS0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.10 views

Faveo Helpdesk 安全漏洞

Faveo Helpdesk is an open source ticketing system built by Faveo based on Laravel framework. A security vulnerability exists in Faveo Helpdesk v2.0.3, which stems from an arbitrary file upload issue in the Ticket Generation feature...

8.2CVSS7.1AI score0.00358EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/10/22 12:00 a.m.20 views

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

7.8AI score0.00358EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/22 12:00 a.m.22 views

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

0.00358EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/24 1:15 a.m.11 views

CVE-2023-1724

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

5.4CVSS6.1AI score0.00467EPSS
SaveExploits1References2
NVD
NVD
added 2023/06/24 1:15 a.m.19 views

CVE-2023-1724

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

7.3CVSS7.3AI score0.00467EPSS
SaveExploits1References2
Prion
Prion
added 2023/06/24 1:15 a.m.22 views

Cross site scripting

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

4.9CVSS5.7AI score0.00467EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/24 12:13 a.m.15 views

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

7.3CVSS6.9AI score0.00467EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/06/24 12:13 a.m.21 views

CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS

Faveo Helpdesk Enterprise version 6.0.1 allows an attacker with agent permissions to perform privilege escalation on the application. This occurs because the application is vulnerable to stored XSS...

7.3CVSS7.5AI score0.00467EPSS
SaveExploits1References2
CVE
CVE
added 2023/06/24 12:13 a.m.61 views

CVE-2023-1724

CVE-2023-1724 affects Faveo Helpdesk Enterprise 6.0.1. The vulnerability is a stored XSS in the application that enables privilege escalation for an attacker possessing agent permissions. Documented impact states that an agent with privileges can escalate within the app; no public exploitation de...

7.3CVSS6.3AI score0.00467EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/06/24 12:00 a.m.9 views

Faveo Helpdesk 跨站脚本漏洞

Faveo Helpdesk is Faveo's open source ticketing system built on the Laravel framework. A security vulnerability exists in Faveo Helpdesk Enterprise version 6.0.1, which stems from the vulnerability of the application to stored XSS, allowing an attacker with proxy privileges to perform privilege...

7.3CVSS5.7AI score0.00467EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/06/24 12:00 a.m.12 views

PT-2023-17193 · Unknown · Faveo Helpdesk Enterprise

Name of the Vulnerable Software and Affected Versions: Faveo Helpdesk Enterprise version 6.0.1 Description: The issue allows an attacker with agent permissions to perform privilege escalation on the application due to a stored XSS vulnerability. Recommendations: For Faveo Helpdesk Enterprise...

7.3CVSS5.5AI score0.00467EPSS
SaveExploits1References5
Rows per page
Query Builder