Lucene search
+L

1256 matches found

Tenable Nessus
Tenable Nessus
added 2022/03/29 12:00 a.m.13 views

SolarWinds Web Help Desk Installed (Windows)

Binary data solarwindswebhelpdeskinstalled.nbin...

7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/03/25 12:00 a.m.11 views

PT-2022-10456 · Solarwinds · Web Help Desk

Name of the Vulnerable Software and Affected Versions: WebHelpDesk affected versions not specified Description: The issue is related to an input that was not sanitized in WebHelpDesk. SolarWinds has removed this input field to prevent its misuse. Recommendations: At the moment, there is no...

8.8CVSS8.4AI score0.01014EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/25 12:00 a.m.13 views

Solarwinds Web Help Desk 安全漏洞

SolarWinds Web Help Desk is a suite of help desk and asset management software from SolarWinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in SolarWinds Web Help Desk 12.7.8 and prior...

8.8CVSS7.9AI score0.01014EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/03/24 12:00 a.m.11 views

SolarWinds Web Help Desk - Web Detection

Binary data solarwindswebhelpdeskdetect.nbin...

7.3AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2022/03/14 1:51 p.m.14 views

Exploit for Files or Directories Accessible to External Parties in Glpi-Project Glpi

GLPwn A GLPI hack tool, using Apache directory listing and /...

9.1CVSS9.3AI score0.7155EPSS
SaveExploits1
OSV
OSV
added 2022/03/10 5:42 p.m.7 views

CVE-2021-35251

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

5.3CVSS5.7AI score0.00949EPSS
SaveExploits0References2
NVD
NVD
added 2022/03/10 5:42 p.m.23 views

CVE-2021-35251

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

5.3CVSS0.00949EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/10 5:42 p.m.23 views

Information disclosure

Sensitive information could be displayed when a detailed technical error message is posted. This information could disclose environmental details about the Web Help Desk installation...

5CVSS5.2AI score0.00949EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/03/09 3:38 p.m.96 views

CVE-2021-35251

CVE-2021-35251 affects SolarWinds Web Help Desk. The issue is information disclosure caused by detailed error messages that can reveal environmental details of the installation. Connected sources indicate a public remediation path via WHD 12-7-8 release notes (patch/update). Explicit exploitation...

5.3CVSS5.1AI score0.00949EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/03/07 12:00 a.m.9 views

Solarwinds Web Help Desk 信息泄露漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. Solarwinds Web Help Desk suffers from an information disclosure vulnerability...

5.3CVSS5.9AI score0.00949EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/01/06 12:00 a.m.19 views

BMC Community Track-It! 授权问题漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. It is used for help desks and helpdesks with asset management. An authorization issue vulnerability exists in BMC Community Track-It! that originates in the GetData endpoint. The issue is caused due to a lack of...

6.5CVSS5.8AI score0.00757EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/01/05 12:00 a.m.71 views

BeyondTrust Remote Support Cross-Site Request Forgery Vulnerability

BeyondTrust Remote Support is a remote desktop access, help desk and collaboration software for Windows, Mac, Linux, Ios iPad, iPhone, etc. BeyondTrust Remote Support is vulnerable to cross-site request forgery. The vulnerability stems from the lack of proper validation of client-side data in the...

6.1CVSS2.8AI score0.28207EPSS
SaveExploits3References1
NVD
NVD
added 2021/12/27 7:15 p.m.25 views

CVE-2021-35232

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...

6.8CVSS0.003EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/27 7:15 p.m.9 views

CVE-2021-35232

Hard coded credentials discovered in SolarWinds Web Help Desk product. Through these credentials, the attacker with local access to the Web Help Desk host machine allows to execute arbitrary HQL queries against the database and leverage the vulnerability to steal the password hashes of the users ...

6.1CVSS6.6AI score0.003EPSS
SaveExploits0References2
CVE
CVE
added 2021/12/27 6:48 p.m.86 views

CVE-2021-35232

CVE-2021-35232 affects SolarWinds Web Help Desk versions up to and including 12.7.6. It arises from hard-coded credentials that permit a local attacker with access to the Web Help Desk host to execute arbitrary HQL queries against the database, enabling theft of user password hashes or insertion ...

6.8CVSS6.6AI score0.003EPSS
SaveIn wildExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/12/27 12:00 a.m.13 views

Solarwinds Web Help Desk 信任管理问题漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and other features. SolarWinds Web Help Desk suffers from a trust management issue vulnerability...

6.8CVSS6.6AI score0.003EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/23 8:15 p.m.9 views

CVE-2021-35243

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server 12.7.7 and earlier, allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the...

7.5CVSS5.9AI score0.009EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/23 8:15 p.m.23 views

CVE-2021-35243

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server 12.7.7 and earlier, allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the...

7.5CVSS0.009EPSS
SaveExploits0References2
Prion
Prion
added 2021/12/23 8:15 p.m.20 views

Design/Logic Flaw

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server 12.7.7 and earlier, allowing users to execute dangerous HTTP requests. The HTTP PUT method is normally used to upload data that is saved on the server with a user-supplied URL. While the DELETE method requests that the...

5CVSS7.7AI score0.009EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/12/23 7:48 p.m.86 views

CVE-2021-35243

The CVE-2021-35243 entry is associated with SolarWinds Web Help Desk (versions 12.7.7 and earlier). The vulnerability arises from HTTP PUT and DELETE methods being enabled on the web server, enabling users to issue potentially dangerous requests. According to the NVD description, improper use of ...

7.5CVSS6.5AI score0.009EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder