Lucene search
+L

1256 matches found

CNNVD
CNNVD
added 2021/08/26 12:00 a.m.8 views

SolarWinds Web Help Desk 安全漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in SolarWinds Web Help Desk 12.7.2, which can be...

5.3CVSS5.8AI score0.01172EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/08/20 2:12 p.m.4 views

CVE-2021-32076

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

5.3CVSS6.2AI score0.01172EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/09 7:15 p.m.7 views

DEBIAN-CVE-2013-4717

Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...

8.8CVSS8.1AI score0.01322EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/09 7:15 p.m.27 views

CVE-2013-4717

Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...

8.8CVSS0.01322EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/09 7:15 p.m.34 views

Sql injection

Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...

6.5CVSS8.7AI score0.01322EPSS
SaveExploits0References1Affected Software2
UbuntuCve
UbuntuCve
added 2021/08/09 7:15 p.m.40 views

CVE-2013-4717

Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...

8.8CVSS7.2AI score0.01322EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/08/09 6:03 p.m.76 views

CVE-2013-4717

Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...

8.8CVSS8.1AI score0.01322EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/08/09 6:03 p.m.40 views

CVE-2013-4717

Multiple SQL injection vulnerabilities in Open Ticket Request System OTRS Help Desk 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to Kernel/Output/HTML/PreferencesCustomQueue.pm,...

9AI score0.01322EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/09 6:03 p.m.101 views

CVE-2013-4717

CVE-2013-4717 documents multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk. Affected releases: OTRS 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9. Vulnerability arises from improper handling in modules Kernel/Output/HTML/PreferencesCustomQueue...

8.8CVSS8.8AI score0.01322EPSS
SaveExploits0References1Affected Software2
Exploit DB
Exploit DB
added 2021/07/08 12:00 a.m.410 views

Wyomind Help Desk 1.3.6 - Remote Code Execution (RCE)

Exploit Title: Wyomind Help Desk 1.3.6 - Remote Code Execution RCE Date: 2021-07-07 Exploit Author: Patrik Lantz Vendor Homepage: https://www.wyomind.com/magento2/helpdesk-magento-2.html Version: Content-Type: multipart/form-data; boundary=---------------------------243970849510445067673127196635...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/07/08 12:00 a.m.365 views

Wyomind Help Desk 1.3.6 XSS / Traversal / Shell Upload

Exploit Title: Wyomind Help Desk 1.3.6 - Remote Code Execution RCE Date: 2021-07-07 Exploit Author: Patrik Lantz Vendor Homepage: https://www.wyomind.com/magento2/helpdesk-magento-2.html Version: Content-Type: multipart/form-data; boundary=---------------------------243970849510445067673127196635...

SaveExploits0
Citrix
Citrix
added 2021/06/15 12:00 a.m.12 views

Unable to Add Account Using Citrix Workspace App for Mac 21.6 with Error: , “Key size is not permitted for this use in certificate"

Trying to add an account on Citrix Workspace App for Mac 21.6 on macOS 10.15, receiving the following error: Cannot add account Contact your help desk with the error description that you receive. For example, “Key size is not permitted for this use in certificate.” RFMAC-8431...

6.9AI score
SaveExploits0
Citrix
Citrix
added 2021/04/29 12:00 a.m.9 views

Receiver for Chromebook Users Cannot Log On to Access Gateway Enterprise Edition

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. Users running the Receiver for Chromebook 1.0 cannot log on to Access Gateway Enterprise Edition...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/04/22 12:32 p.m.53 views

Cost of Account Unlocks, and Password Resets Add Up

There are many labor-intensive tasks that the IT service desk carries out on a daily basis. None as tedious and costly as resetting passwords. Modern IT service desks spend a significant amount of time both unlocking and resetting passwords for end-users. This issue has been exacerbated by the...

7.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2021/04/01 9:49 a.m.49 views

How to Vaccinate Against the Poor Password Policy Pandemic

Data breaches remain a constant threat, and no industry or organization is immune from the risks. From Fortune 500 companies to startups, password-related breaches continue to spread seemingly unchecked. As a result of the volume of data breaches and cybersecurity incidents, hackers now have acce...

0.2AI score
SaveExploits0
Citrix
Citrix
added 2021/04/01 12:00 a.m.10 views

FAQ: Configuring Local Access Using Receiver for HTML5 1.0

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article contains Frequently Asked Questions on configuring local access using Citrix Receiver f...

6.9AI score
SaveExploits0
Citrix
Citrix
added 2021/04/01 12:00 a.m.12 views

Citrix Receiver Application Icons are Unavailable from Systray

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. After installing Citrix Receiver 3.0 and configuring it for PN Agent operation, users cannot configu...

7AI score
SaveExploits0
Citrix
Citrix
added 2021/04/01 12:00 a.m.13 views

Error: "You cannot add apps at this time" on Receiver StoreFront

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Domain users receive the following error after logging in using Receiver for Website : “You cannot a...

7AI score
SaveExploits0
OSV
OSV
added 2021/03/29 4:15 p.m.10 views

CVE-2021-29267

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

6.1CVSS6.4AI score0.00853EPSS
SaveExploits2References2
Prion
Prion
added 2021/03/29 4:15 p.m.20 views

Cross site scripting

Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting XSS by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature...

4.3CVSS6AI score0.00853EPSS
SaveExploits2References2Affected Software1
Rows per page
Query Builder