Lucene search
+L

1190 matches found

CNNVD
CNNVD
added 2025/09/05 12:00 a.m.9 views

WordPress plugin Helpdesk Integration 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS6.5AI score0.00711EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2025/09/04 9:46 p.m.14 views

WordPress WordPress Helpdesk Integration plugin <= 5.8.10 - Unauthenticated Local File Inclusion vulnerability

Unauthenticated Local File Inclusion vulnerability discovered by Aril Aprilio forsak3n in WordPress Plugin WordPress Helpdesk Integration versions = 5.8.10...

8.1CVSS6.7AI score0.00711EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/09/03 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2020-11032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. Th...

7.6CVSS7.2AI score0.01015EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/24 12:00 a.m.12 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE and EE versions prior to 17.9 to 18.0.5,...

4.3CVSS6.3AI score0.00408EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/06/06 12:00 a.m.16 views

FreeScout Cross-Site Scripting Vulnerability (CNVD-2025-20778)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a cross-site scripting vulnerability that stems from not filtering the payload when creating translated phrases, no details of the vulnerability are...

6CVSS6.4AI score0.0026EPSS
SaveExploits1References1
Veracode
Veracode
added 2025/06/05 3:07 a.m.10 views

Sensitive Data Exposure

django-helpdesk is vulnerable to Sensitive Data Exposure. The vulnerability is due to insecure file permission settings due to os.umask0 in models.py, allows an attacker to access sensitive files or data that should be protected...

5.1CVSS6.5AI score0.00205EPSS
SaveExploits1References7Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/02 12:29 a.m.10 views

CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS7AI score0.00205EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2025/05/31 3:30 a.m.23 views

django-helpdesk Allows Sensitive Data Exposure

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS6.8AI score0.00205EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2025/05/31 3:30 a.m.5 views

GHSA-M4JX-M5HG-QRXX django-helpdesk Allows Sensitive Data Exposure

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS7.1AI score0.00205EPSS
SaveExploits1References7
PyPA
PyPA
added 2025/05/31 1:15 a.m.15 views

PYSEC-2025-44

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS7AI score0.00205EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/05/31 1:15 a.m.22 views

CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS0.00205EPSS
SaveExploits1References3
OSV
OSV
added 2025/05/31 1:15 a.m.10 views

CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

4.4CVSS6.7AI score
SaveExploits0References3
OSV
OSV
added 2025/05/31 1:15 a.m.9 views

PYSEC-2025-44

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS5.6AI score0.00205EPSS
SaveExploits1References4
Snyk
Snyk
added 2025/05/31 12:45 a.m.2 views

Insecure Inherited Permissions

Overview django-helpdesk is a Django-powered ticket tracker for your helpdesk Affected versions of this package are vulnerable to Insecure Inherited Permissions due to the improper setting of os.umask0 in models.py. An attacker can access sensitive data without proper authorization by exploiting...

5.1CVSS6.8AI score0.00205EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/05/31 12:00 a.m.18 views

PT-2025-23364 · Unknown · Django-Helpdesk

Name of the Vulnerable Software and Affected Versions: django-helpdesk versions prior to 1.0.0 Description: The issue concerns Sensitive Data Exposure due to the use of os.umask0 in models.py. This allows unauthorized access to sensitive information. Recommendations: For versions prior to 1.0.0,...

5.1CVSS6.1AI score0.00205EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2025/05/31 12:00 a.m.10 views

Django-Helpdesk 安全漏洞

Django-Helpdesk is a Django application in the Django open source. It is used to manage internal helpdesk tickets. A security vulnerability exists in Django-Helpdesk versions prior to 1.0.0, which stems from os.umask0 in models.py leading to the exposure of sensitive data...

5.1CVSS6.3AI score0.00205EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/31 12:00 a.m.5 views

CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS5.3AI score0.00205EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/05/31 12:00 a.m.30 views

CVE-2018-25111

django-helpdesk before 1.0.0 allows Sensitive Data Exposure because of os.umask0 in models.py...

5.1CVSS0.00205EPSS
SaveExploits1References3
CVE
CVE
added 2025/05/31 12:00 a.m.66 views

CVE-2018-25111

CVE-2018-25111 affects django-helpdesk versions prior to 1.0.0. The root cause is os.umask(0) usage in models.py, which leads to exposure of sensitive data. Affected component: django-helpdesk (Python/Django app). Impact stated: sensitive data exposure with local access; no remote/external vector...

5.1CVSS5.2AI score0.00205EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/05/30 12:00 a.m.7 views

FreeScout 安全漏洞

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability caused by a failure to check for missing password fields in data from users. An attacker could exploit the...

8.8CVSS6.9AI score0.00525EPSS
SaveExploits1References2
Rows per page
Query Builder