Lucene search
+L

1224 matches found

Cvelist
Cvelist
added 2024/12/10 8:20 a.m.33 views

CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

5.3CVSS0.00498EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/10 8:20 a.m.77 views

CVE-2024-45709

CVE-2024-45709 affects SolarWinds Web Help Desk. The vulnerability is a local file read flaw that requires the product to be installed on Linux and configured to use a non-default development/test mode, which limits exposure. The available sources do not specify affected versions (beyond the Linu...

5.5CVSS5.1AI score0.00498EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/10 8:20 a.m.13 views

CVE-2024-45709 SolarWinds Web Help Desk Local File Read Vulnerability

SolarWinds Web Help Desk was susceptible to a local file read vulnerability. This vulnerability requires the software be installed on Linux and configured to use non-default development/test mode making exposure to the vulnerability very limited...

5.3CVSS6.8AI score0.00498EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/10 12:0 a.m.4 views

SolarWinds Web Help Desk 路径遍历漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. SolarWinds Web Help Desk suffers from a path traversal vulnerability tha...

5.5CVSS6.4AI score0.00498EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/19 5:15 p.m.16 views

CVE-2024-51910

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...

6.5CVSS0.00285EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 4:31 p.m.9 views

CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mauro Cordioli Assist24 Help Desk allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through 20150401.2...

6.5CVSS6.9AI score0.00285EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/19 4:31 p.m.52 views

CVE-2024-51910

CVE-2024-51910 is a DOM-based XSS in Mauro Cordioli’s Assist24 Help Desk WordPress plugin (vulnerable through 20150401.2). Root cause: improper input neutralization during web page generation. Affected software: Assist24 Help Desk (WordPress plugin). Impact: Cross-site scripting via crafted input...

6.5CVSS7.2AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/19 4:31 p.m.24 views

CVE-2024-51910 WordPress Assist24 Help Desk plugin <= 20150401.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ezlab Assist24 Help Desk assist24it allows DOM-Based XSS.This issue affects Assist24 Help Desk: from n/a through = 20150401.2...

6.5CVSS0.00285EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/19 12:0 a.m.5 views

PT-2024-35043 · Mauro Cordioli · Assist24 Help Desk

Name of the Vulnerable Software and Affected Versions: Mauro Cordioli Assist24 Help Desk versions from n/a through 20150401.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks...

6.5CVSS6AI score0.00285EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.5 views

WordPress plugin Assist24 Help Desk 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress plugin...

6.5CVSS7.6AI score0.00285EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/14 7:15 p.m.11 views

CVE-2024-52370

Unrestricted Upload of File with Dangerous Type vulnerability in Hive Support Hive Support hive-support allows Upload a Web Shell to a Web Server.This issue affects Hive Support: from n/a through = 1.1.1...

9.9CVSS0.00478EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/14 6:13 p.m.53 views

CVE-2024-52370

CVE-2024-52370 concerns the WordPress plugin “Hive Support – WordPress Help Desk.” The vulnerability is described as Unrestricted Upload of File with Dangerous Type, enabling an attacker to upload a web shell to the web server. Affected versions are Hive Support – WordPress Help Desk up to 1.1.1....

9.9CVSS7.2AI score0.00478EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.6 views

PT-2024-35207 · WordPress · Hive Support – Wordpress Help Desk

Name of the Vulnerable Software and Affected Versions: Hive Support – WordPress Help Desk versions 1.1.1 and earlier Description: The issue allows for the unrestricted upload of files with dangerous types, potentially enabling an attacker to upload a web shell to a web server. This could grant an...

9.9CVSS9.7AI score0.00478EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2024/11/11 12:0 a.m.12 views

WordPress Hive Support – WordPress Help Desk Plugin <= 1.1.1 is vulnerable to Arbitrary File Upload

Software Hive Support – WordPress Help Desk Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-52370 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID 6b874f7d4e45 Credits stealthcopter Requir...

9.9CVSS9.6AI score0.00478EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/11/09 1:15 p.m.16 views

CVE-2024-51670

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS0.00253EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/09 1:15 p.m.6 views

CVE-2024-51670

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Stored XSS.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.7...

4.8CVSS5.8AI score0.00253EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/09 1:6 p.m.64 views

CVE-2024-51670

CVE-2024-51670 – JS Help Desk WordPress Plugin : Affected plugin versions are

5.9CVSS5.9AI score0.00253EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/09 1:6 p.m.28 views

CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS0.00253EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/09 1:6 p.m.14 views

CVE-2024-51670 WordPress JS Help Desk plugin <= 2.8.7 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Help Desk js-support-ticket allows Stored XSS.This issue affects JS Help Desk: from n/a through = 2.8.7...

5.9CVSS5.9AI score0.00253EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/09 12:0 a.m.10 views

PT-2024-34815

Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.8.7 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, whic...

5.9CVSS5.4AI score0.00253EPSS
SaveExploits0References7
Rows per page
Query Builder