Lucene search
K

25 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/26 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-52204

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter CVE-2025-52204 Note tha...

6.1CVSS5.8AI score0.00013EPSS
Exploits1References3
EUVD
EUVD
added 2026/03/23 9:30 p.m.1 views

EUVD-2025-208946

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

5.8AI score0.00013EPSS
Exploits1References4
OSV
OSV
added 2026/03/23 8:16 p.m.2 views

DEBIAN-CVE-2025-52204

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

6.1CVSS5.2AI score0.00013EPSS
Exploits1References1
NVD
NVD
added 2026/03/23 8:16 p.m.3 views

CVE-2025-52204

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

6.1CVSS0.00013EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/03/23 12:0 a.m.2 views

CVE-2025-52204

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

5.8AI score0.00013EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/03/23 12:0 a.m.3 views

CVE-2025-52204

A Cross-Site Scripting XSS vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameter...

5.8AI score0.00013EPSS
Exploits1References4
CVE
CVE
added 2026/03/23 12:0 a.m.18 views

CVE-2025-52204

Znuny ITSM 6.5.x is vulnerable to a Cross-Site Scripting (XSS) in the customer.pl endpoint via the OTRSCustomerInterface parameter. The issue, observed across Znuny versions (e.g., Znuny 6.5.x; confirmed in 6.5.9/6.5.17), is caused by unsanitized input that can inject arbitrary HTML/JavaScript in...

6.1CVSS5.8AI score0.00013EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-4726

Malware in sbrugna...

4CVSS6.2AI score0.00219EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-4727

Malware in sbrugna...

3.5CVSS6.2AI score0.00148EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/07/09 12:0 a.m.1 views

Easy!Appointments Security Vulnerability

Easy!Appointments is a web-based appointment and schedule management system. A security vulnerability exists in Easy!Appointments, which stems from an insecure authorization issue in the /customers/customerId interface. A low-privilege attacker can exploit this vulnerability to obtain, modify, or...

9.9CVSS6.8AI score0.00223EPSS
Exploits0References2
Vulnerability Lab
Vulnerability Lab
added 2016/04/25 12:0 a.m.36 views

NVV Ticket Krauth ATM - (NaN) Devide by Zero Vulnerability

Document Title: =============== NVV Ticket Krauth ATM - NaN Devide by Zero Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1837 View Video: https://www.youtube.com/watch?v=iIT4gcboKjk Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2012/04/19 12:0 a.m.21 views

ReadyDesk Cross Site Scripting

Exploit Title: ReadyDesk Cross Site Scripting Date: 19.04.2012 Author: Sony Software Link: http://www.readydesk.com/ Google Dorks: powered by readydesk Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/04/readydesk-cross-site-scripting.html...

7.4AI score
Exploits0
OSV
OSV
added 2011/03/18 4:55 p.m.5 views

CVE-2010-4761

The customer-interface ticket-print dialog in Open Ticket Request System OTRS before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the 1 responsible, 2 owner, 3 accounted time, 4 pending until...

6AI score
Exploits0References2
OSV
OSV
added 2011/03/18 4:55 p.m.1 views

DEBIAN-CVE-2011-1433

The 1 AgentInterface and 2 CustomerInterface components in Open Ticket Request System OTRS before 3.0.6 place cleartext credentials into the session data in the database, which makes it easier for context-dependent attackers to obtain sensitive information by reading the UserLogin and UserPW fiel...

5CVSS6.5AI score0.00362EPSS
Exploits0References1
NVD
NVD
added 2011/03/18 4:55 p.m.11 views

CVE-2010-4761

The customer-interface ticket-print dialog in Open Ticket Request System OTRS before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the 1 responsible, 2 owner, 3 accounted time, 4 pending until...

4CVSS5.8AI score0.00219EPSS
Exploits0References2
NVD
NVD
added 2011/03/18 4:55 p.m.15 views

CVE-2010-4762

Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...

3.5CVSS5.3AI score0.00148EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2011/03/18 4:55 p.m.15 views

CVE-2010-4762

Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...

3.5CVSS6AI score0.00148EPSS
Exploits0References1
Prion
Prion
added 2011/03/18 4:55 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...

3.5CVSS5.7AI score0.00148EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2011/03/18 4:55 p.m.19 views

CVE-2010-4761

The customer-interface ticket-print dialog in Open Ticket Request System OTRS before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the 1 responsible, 2 owner, 3 accounted time, 4 pending until...

4CVSS5.9AI score0.00219EPSS
Exploits0References1
Prion
Prion
added 2011/03/18 4:55 p.m.15 views

Design/Logic Flaw

The customer-interface ticket-print dialog in Open Ticket Request System OTRS before 3.0.0-beta3 does not properly restrict customer-visible data, which allows remote authenticated users to obtain potentially sensitive information from the 1 responsible, 2 owner, 3 accounted time, 4 pending until...

4CVSS6.3AI score0.00219EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder