Lucene search
+L

3465 matches found

CVE
CVE
added 2024/06/24 12:0 a.m.88 views

CVE-2021-45785

Summary of CVE-2021-45785 (TruDesk) : TruDesk Help Desk/Ticketing Solution v1.1.11 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an attacker to restart the server, causing a DoS. The attacker must lure a privileged user to visit a page containing a GET request to th...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/24 12:0 a.m.19 views

CVE-2024-34992

SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets'...

7.6AI score0.00403EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/24 12:0 a.m.27 views

CVE-2024-34992

SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop allows attackers to obtain sensitive information and cause other impacts via 'Tickets::getsearchedtickets'...

0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/24 12:0 a.m.52 views

CVE-2024-34992

SQL Injection in the FME Modules for PrestaShop Help Desk (customer support) module, affected versions up to 2.4.0, exploitable via Tickets::getsearchedtickets() and capable of exposing sensitive information and causing additional impacts. Remediation guidance from multiple sources: upgrade to a ...

8.8CVSS7.2AI score0.00403EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/19 9:15 p.m.26 views

CVE-2024-34990

In the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files. Methods HelpdeskHelpdeskModuleFrontController::submitTicket and HelpdeskHelpdeskModuleFrontController::replyTicket allow upload of .php...

10CVSS0.00514EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/19 12:0 a.m.30 views

CVE-2024-34990

In the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files. Methods HelpdeskHelpdeskModuleFrontController::submitTicket and HelpdeskHelpdeskModuleFrontController::replyTicket allow upload of .php...

0.00514EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/19 12:0 a.m.49 views

CVE-2024-34990

CVE-2024-34990 affects the PrestaShop FME Modules Help Desk – Customer Support Management System up to version 2.4.0. The vulnerability arises from allow­ing PHP file uploads via HelpdeskHelpdeskModuleFrontController::submitTicket() and HelpdeskHelpdeskModuleFrontController::replyTicket(), upload...

10CVSS7.2AI score0.00514EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/06/19 12:0 a.m.8 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution offers multiple payment methods, SMS alerts, and product image zoom, among other features. A security vulnerability exists in PrestaShop Help Desk - Customer Support Management System version 2.4.0...

10CVSS6.8AI score0.00514EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/06/19 12:0 a.m.14 views

CVE-2024-34990

In the module "Help Desk - Customer Support Management System" helpdesk up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files. Methods HelpdeskHelpdeskModuleFrontController::submitTicket and HelpdeskHelpdeskModuleFrontController::replyTicket allow upload of .php...

6.6AI score0.00514EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/09 12:15 p.m.44 views

CVE-2024-31273

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3...

9.8CVSS0.00472EPSS
SaveExploits0References1
OSV
OSV
added 2024/06/09 12:15 p.m.8 views

CVE-2024-31273

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3...

9.8CVSS5.8AI score0.00472EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/09 11:16 a.m.59 views

CVE-2024-31273

CVE-2024-31273 is described as a Missing Authorization vulnerability in the WordPress plugin JS Help Desk – Best Help Desk & Support Plugin , affecting versions from n/a through 2.8.3. The available Connected documents corroborate the flaw in this plugin and list the vulnerability class as Missin...

9.8CVSS5.7AI score0.00472EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/09 11:16 a.m.16 views

CVE-2024-31273 WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3...

5.3CVSS6.9AI score0.00472EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/09 11:16 a.m.40 views

CVE-2024-31273 WordPress JS Help Desk plugin <= 2.8.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.3...

5.3CVSS0.00472EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/09 12:0 a.m.15 views

PT-2024-23918 · WordPress · Js Help Desk

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions 2.8.3 and earlier Description: A Missing Authorization issue affects the JS Help Desk plugin. This issue allows unauthorized access, potentially leading to security breaches. The estimat...

9.8CVSS9.4AI score0.00472EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/06/09 12:0 a.m.11 views

WordPress plugin JS Help Desk security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

9.8CVSS6.6AI score0.00472EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/06/07 4:40 a.m.313 views

Exploit for SQL Injection in Valvepress Automatic

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

9.9CVSS9.8AI score0.93971EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2024/06/03 2:49 a.m.415 views

Exploit for CVE-2024-4956

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

7.5CVSS8.2AI score0.18245EPSS
SaveExploits16
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.14 views

RHEL 5 : eclipse (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - eclipse: Help Content web application vulnerable to multiple XSS CVE-2010-4647 - Multiple cross-site...

4.3CVSS6AI score0.05219EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
added 2024/06/03 12:0 a.m.15 views

PT-2024-3976 · Zyxel · Zyxel Nas326 +1

Name of the Vulnerable Software and Affected Versions: Zyxel NAS326 versions prior to V5.21AAZF.17C0 Zyxel NAS542 versions prior to V5.21ABAG.14C0 Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. Exploitation of this...

10CVSS8.1AI score0.89326EPSS
SaveExploits2References23
Rows per page
Query Builder