1170 matches found
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
CVE-2025-24458
Summary (CVE-2025-24458): JetBrains YouTrack prior to 2024.3.55417 is affected by an account takeover vulnerability via spoofed email and Helpdesk integration. The vulnerability is described across multiple sources as allowing unauthorized access through manipulated emails and helpdesk workflows,...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a project management tool developed by the Czech company JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from a security vulnerability that stems from account takeover via spoofed emails and Helpdesk integration. No details of the...
PT-2025-5364 · Jetbrains · Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.55417 Description: The issue allows for account takeover via spoofed email and Helpdesk integration. This enables unauthorized access to accounts, potentially leading to data breaches or other...
PT-2025-4682 · WordPress · Wordpress Helpdesk & Support Ticket System Plugin – Octrace Support
Name of the Vulnerable Software and Affected Versions: Octrace Studio WordPress HelpDesk & Support Ticket System Plugin – Octrace Support versions 1.2.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site...
CVE-2023-42230
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the WSCView/Save function...
CVE-2023-42232
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42234
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Request Forgery CSRF via the WSCView function...
CVE-2023-42233
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Cross Site Scripting XSS via the Filter/FilterEditor function...
CVE-2023-42232
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Navigator/Index function...
CVE-2023-42225
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function...
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...
CVE-2023-42229
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal. Arbitrary files can be created on the system via authenticated SOAP requests to the WSConnector service...
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...
CVE-2023-42227
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the WSCView/Save function...
CVE-2023-42226
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...
CVE-2023-42225
Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via the Attachment/DownloadTempFile function...
PT-2025-1459 · Pat Infinite Solutions · Helpdeskadvanced
Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Cross Site Scripting XSS vulnerability via the Filter/FilterEditor function. This allows for potential malicious script execution. No informatio...