Lucene search
+L

405 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 11:06 p.m.•14 views

CVE-2022-1592

Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...

9.4CVSS6.8AI score0.01187EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 3:15 a.m.•16 views

CVE-2024-51778

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tevya Satisfaction Reports from Help Scout happiness-reports-for-help-scout allows Reflected XSS.This issue affects Satisfaction Reports from Help Scout: from n/a through = 2.0.3...

7.1CVSS7.2AI score0.0027EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/07 4:15 p.m.•16 views

CVE-2025-22512

Missing Authorization vulnerability in BoldGrid Help Scout help-scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Help Scout: from n/a through = 6.5.6...

4.3CVSS0.0039EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/07 2:57 p.m.•58 views

CVE-2025-22512

CVE-2025-22512 is a Missing Authorization vulnerability affecting the Help Scout plugin for WordPress (Sprout Apps Help Scout). The Red Hat entry notes the issue affects Help Scout versions from n/a up to 6.5.1. Wordfence references the same CVE and lists the vulnerability in its vulnerability da...

4.3CVSS7.2AI score0.0039EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/07 2:57 p.m.•32 views

CVE-2025-22512 WordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in BoldGrid Help Scout help-scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Help Scout: from n/a through = 6.5.6...

4.3CVSS0.0039EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/07 2:57 p.m.•9 views

CVE-2025-22512 WordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in BoldGrid Help Scout help-scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Help Scout: from n/a through = 6.5.6...

4.3CVSS7.2AI score0.0039EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/07 1:45 p.m.•14 views

WordPress Help Scout Plugin <= 6.5.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Help Scout versions = 6.5.6...

4.3CVSS7AI score0.0039EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•17 views

WordPress plugin Help Scout 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

4.3CVSS8.2AI score0.0039EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•7 views

CVE-2025-22512: Missing Authorization

Missing Authorization vulnerability in BoldGrid Help Scout help-scout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Help Scout: from n/a through = 6.5.6...

4.3CVSS5.9AI score0.0039EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•6 views

PT-2025-4505

Name of the Vulnerable Software and Affected Versions Help Scout versions n/a through 6.5.1 Description The issue is related to a missing authorization vulnerability in Sprout Apps Help Scout, which allows the exploitation of incorrectly configured access control security levels. Recommendations...

4.3CVSS0.0039EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/12/14 3:58 a.m.•13 views

SUSE CVE-2024-47530

Scout is a web-based visualizer for VCF-files. Open redirect vulnerability allows performing phishing attacks on users by redirecting them to malicious page. /login API endpoint is vulnerable to open redirect attack via next parameter due to absence of sanitization logic. Additionally, due to lac...

6.1CVSS6.8AI score0.00393EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•7 views

CVE-2024-52051: Improper Input Validation

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 All versions, SIMATIC S7-PLCSIM V18 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4, SIMATIC STEP 7 V17 All versions V17 Upda...

7.3CVSS6AI score0.00179EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•9 views

CVE-2024-49849: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 9, SIMATIC STEP 7 Safety V18 All versions, SIMATIC STEP 7 Safety V19 All versions V19 Update 4,...

8.4CVSS6.2AI score0.00217EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:31 p.m.•54 views

CVE-2024-51828 WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...

6.5CVSS0.00377EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 4:31 p.m.•21 views

CVE-2024-51828 WordPress Beacon For Help Scout plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...

6.5CVSS7.2AI score0.00377EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:31 p.m.•69 views

CVE-2024-51828

CVE-2024-51828 is an XSS vulnerability affecting the WordPress plugin Beacon For Help Scout (WordPress plugin) with versions up to and including 1.3.0 . The issue is described as an Authenticated (Contributor+) Stored Cross-Site Scripting vector arising from improper neutralization of input durin...

6.5CVSS7.2AI score0.00377EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•15 views

WordPress plugin Beacon For Help Scout 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.6AI score0.00377EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•9 views

PT-2024-34955

Name of the Vulnerable Software and Affected Versions Beacon For Help Scout versions 1.3.0 and earlier Description The issue affects the Beacon For Help Scout plugin, allowing DOM-Based XSS due to improper neutralization of input during web page generation. This can lead to cross-site scripting...

6.5CVSS0.00377EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•5 views

CVE-2024-51828: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dan Griffiths Beacon For Help Scout beacon-for-helpscout allows DOM-Based XSS.This issue affects Beacon For Help Scout: from n/a through = 1.3.0...

6.5CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/12 12:00 a.m.•7 views

CVE-2023-32736: Deserialization of Untrusted Data

A vulnerability has been identified in SIMATIC S7-PLCSIM V16 All versions, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 Safety V16 All versions, SIMATIC STEP 7 Safety V17 All versions V17 Update 8, SIMATIC STEP 7 Safety V18 All versions V18 Update 5, SIMATIC STEP 7 V16 All versions, SIMATIC...

7.3CVSS6.2AI score0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder