Lucene search
+L

2507 matches found

CNNVD
CNNVD
added 2025/02/19 12:00 a.m.9 views

Cisco Video Phone和Cisco Desk Phone 信息泄露漏洞

Cisco Video Phone and Cisco Desk Phone are both products of Cisco, Inc.Cisco Video Phone is an IP phone.Cisco Desk Phone is a desk phone. An information disclosure vulnerability exists in the Cisco Video Phone 8875 and the Cisco Desk Phone 9800, which stems from insufficient validation of user...

4.4CVSS5.8AI score0.00153EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/13 10:57 a.m.16 views

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS6.3AI score0.00279EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/13 10:15 a.m.21 views

CVE-2024-13606

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS0.00423EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/13 10:15 a.m.5 views

CVE-2024-13606

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS7.3AI score0.00423EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/13 9:21 a.m.22 views

CVE-2024-13606 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS0.00423EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/13 9:21 a.m.12 views

CVE-2024-13606 JS Help Desk – The Ultimate Help Desk & Support Plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.8 via the 'jssupportticketdata' directory. This makes it possible for unauthenticated attackers to extract sensitive data store...

7.5CVSS6.5AI score0.00423EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/13 9:21 a.m.75 views

CVE-2024-13606

CVE-2024-13606 relates to the WordPress plugin “JS Help Desk – The Ultimate Help Desk & Support Plugin.” According to the provided documents, all versions up to and including 2.8.8 are vulnerable to an Unauthenticated Sensitive Information Exposure via an insecure directory: /wp-content/uploads/j...

7.5CVSS6.5AI score0.00423EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/13 12:00 a.m.13 views

PT-2025-6581 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – The Ultimate Help Desk & Support Plugin versions up to, and including, 2.8.8 Description: The issue concerns the exposure of sensitive information in the JS Help Desk plugin for WordPress. This vulnerability allows...

7.5CVSS9.2AI score0.00423EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.8 views

WordPress plugin JS Help Desk 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. An information disclosure vulnerabili...

7.5CVSS7.9AI score0.00423EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/02/12 10:16 p.m.8 views

WordPress JS Help Desk plugin <= 2.8.8 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability

Unauthenticated Sensitive Information Exposure Through Unprotected Directory vulnerability discovered by Tim Coen in WordPress Plugin JS Help Desk versions = 2.8.8...

7.5CVSS7AI score0.00423EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
added 2025/02/11 1:30 p.m.19 views

4 Ways to Keep MFA From Becoming too Much of a Good Thing

Multi-factor authentication MFA has quickly become the standard for securing business accounts. Once a niche security measure, adoption is on the rise across industries. But while it's undeniably effective at keeping bad actors out, the implementation of MFA solutions can be a tangled mess of...

7.4AI score
SaveExploits0
NVD
NVD
added 2025/02/11 8:15 a.m.30 views

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS0.00279EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/11 8:15 a.m.9 views

CVE-2024-28989

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS5.8AI score0.00279EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/02/11 7:13 a.m.8 views

CVE-2024-28989 SolarWinds Web Help Desk Cryptographic Key Management Vulnerability

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS5.2AI score0.00279EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/02/11 7:13 a.m.29 views

CVE-2024-28989 SolarWinds Web Help Desk Cryptographic Key Management Vulnerability

SolarWinds Web Help Desk was found to have a hardcoded cryptographic key that could allow the disclosure of sensitive information from the software...

5.5CVSS0.00279EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/11 12:00 a.m.6 views

SolarWinds Web Help Desk 安全漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from US-based SolarWinds. The software supports centralized knowledge base, IT asset management, project and task management, and other features. A security vulnerability exists in SolarWinds Web Help Desk versions pri...

5.5CVSS6.1AI score0.00279EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/07 5:52 p.m.11 views

CVE-2024-13607

The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.8.8 via the 'exportusereraserequest' due to missing validation on a user controlled key. This makes it possible for authenticat...

4.3CVSS6.4AI score0.00411EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 2:22 a.m.22 views

CVE-2025-22760

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeBard CodeBard Help Desk codebard-help-desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through = 1.1.2...

7.1CVSS7.2AI score0.00276EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 12:04 a.m.11 views

CVE-2022-47151

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

8.6CVSS5.6AI score0.00443EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:02 p.m.11 views

CVE-2022-46838

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.7.1...

9.1CVSS5.2AI score0.00703EPSS
SaveExploits0References1
Rows per page
Query Builder