Lucene search
+L

3465 matches found

Positive Technologies
Positive Technologies
added 2024/01/05 12:0 a.m.11 views

PT-2024-11742 · WordPress · Js Help Desk – Best Help Desk & Support Plugin

Name of the Vulnerable Software and Affected Versions: JS Help Desk – Best Help Desk & Support Plugin versions n/a through 2.7.1 Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the JS Help Desk – Best Help Desk & Support Plugin...

10CVSS9.2AI score0.00827EPSS
SaveExploits0References4
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2024/01/03 12:0 a.m.100 views

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.199 for Mac,Linux and 120.0.6099.199/200 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 120.0.6099.199 for Mac and...

8.8CVSS9.7AI score0.10114EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2023/12/28 8:16 p.m.9 views

CVE-2023-50839

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1...

9.8CVSS7.3AI score0.02041EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/28 8:16 p.m.18 views

CVE-2023-50839

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1...

9.8CVSS0.02041EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 8:16 p.m.19 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1...

7.5CVSS7.9AI score0.02041EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/12/28 8:2 p.m.83 views

CVE-2023-50839

CVE-2023-50839 affects the JS Help Desk – Best Help Desk & Support Plugin for WordPress. The vulnerability is an unauthenticated SQL Injection via email and trackingid in JS Help Desk, impacting versions up to 2.8.1 (as noted in the CVE entry). The vulnerability is labeled as CRITICAL (CVSS v3.1:...

9.8CVSS8.9AI score0.02041EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/28 8:2 p.m.27 views

CVE-2023-50839 WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1...

9.3CVSS10AI score0.02041EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/12/28 8:2 p.m.18 views

CVE-2023-50839 WordPress JS Help Desk – Best Help Desk & Support Plugin <= 2.8.1 is vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin.This issue affects JS Help Desk – Best Help Desk & Support Plugin: from n/a through 2.8.1...

9.3CVSS7.6AI score0.02041EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/28 12:0 a.m.7 views

PT-2023-31670

Name of the Vulnerable Software and Affected Versions JS Help Desk – Best Help Desk & Support Plugin versions through 2.8.1 Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection. This allows for potential exploitatio...

9.8CVSS7.3AI score0.02041EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/12/28 12:0 a.m.13 views

WordPress Plugin JS Help Desk SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.8CVSS7.7AI score0.02041EPSS
SaveExploits0References2
NVD
NVD
added 2023/12/25 6:15 a.m.12 views

CVE-2023-51772

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a...

8.8CVSS0.00515EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2023/12/25 12:0 a.m.14 views

CVE-2023-51772

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a...

6.8AI score0.00515EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/12/25 12:0 a.m.24 views

CVE-2023-51772

One Identity Password Manager before 5.13.1 allows Kiosk Escape. This product enables users to reset their Active Directory passwords on the login screen of a Windows client. It launches a Chromium based browser in Kiosk mode to provide the reset functionality. The escape sequence is: wait for a...

8.8AI score0.00515EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/12/21 12:0 a.m.20 views

WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.8.1 is vulnerable to SQL Injection

Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.8.1 Fixed in 2.8.2 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-50839 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID e03053a216be Credits Fariq Fadillah...

9.8CVSS6.8AI score0.02041EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2023/12/18 11:27 a.m.39 views

CVE-2022-48541

A flaw was found in ImageMagick, which susceptible to a Missing Release of Memory after the Effective Lifetime vulnerability is triggered by the 'identify -help' command. This issue could allow an attacker to initiate a denial of service attack by inducing a memory leak. Mitigation Mitigation for...

7.1CVSS7.2AI score0.01188EPSS
SaveExploits1References7
Fedora
Fedora
added 2023/12/06 1:47 a.m.18 views

[SECURITY] Fedora 38 Update: rust-tealdeer-1.6.1-5.fc38

Fetch and show tldr help pages for many CLI commands. Full featured offline client with caching support...

7.4AI score
SaveExploits0
NVD
NVD
added 2023/11/30 4:15 p.m.18 views

CVE-2023-37890

Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress Help Desk and Knowledge...

4.3CVSS0.00504EPSS
SaveExploits0References1
OSV
OSV
added 2023/11/30 4:15 p.m.7 views

CVE-2023-37890

Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Functionality Not Properly Constrained by ACLs. Users with a role as low as a subscriber can view other customers.This issue affects KB Support – WordPress Help Desk and Knowledge...

4.3CVSS7.3AI score0.00504EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/30 3:13 p.m.61 views

CVE-2023-37890

CVE-2023-37890 affects KB Support – WordPress Help Desk and Knowledge Base (WordPress plugin) up to version 1.5.88. The issue is a Missing Authorization flaw that allows users with role as low as subscriber to view other customers’ data. Exploitation details are not provided in the initial docume...

4.3CVSS6.2AI score0.00504EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.10 views

PT-2023-26161 · WordPress · The Kb Support – Wordpress Help Desk/Knowledge Base

Name of the Vulnerable Software and Affected Versions: KB Support – WordPress Help Desk and Knowledge Base versions 1.5.88 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Users with a ro...

4.3CVSS8.6AI score0.00504EPSS
SaveExploits0References7
Rows per page
Query Builder