Lucene search
+L

1169 matches found

Cvelist
Cvelist
added 2025/01/13 12:0 a.m.18 views

CVE-2023-42226

Pat Infinite Solutions HelpdeskAdvanced = 11.0.33 is vulnerable to Directory Traversal via Email/SaveAttachment function...

0.0074EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.11 views

PT-2025-1459 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Cross Site Scripting XSS vulnerability via the Filter/FilterEditor function. This allows for potential malicious script execution. No informatio...

6.1CVSS5.9AI score0.00228EPSS
SaveExploits0References5
CVE
CVE
added 2025/01/13 12:0 a.m.34 views

CVE-2023-42225

Pat Infinite Solutions HelpdeskAdvanced

7.5CVSS6.6AI score0.0074EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/01/13 12:0 a.m.33 views

CVE-2023-42226

Pat Infinite Solutions HelpdeskAdvanced

7.5CVSS6.6AI score0.0074EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/01/13 12:0 a.m.39 views

CVE-2023-42231

Pat Infinite Solutions HelpdeskAdvanced

8.1CVSS6.5AI score0.00321EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/12/16 10:24 p.m.51 views

CVE-2024-12443

CVE-2024-12443 affects the CRM Perks – WordPress HelpDesk Integration plugin for WordPress. It is a Stored XSS vulnerability in the crm-perks-tickets shortcode present in all versions up to 1.1.6, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitat...

6.4CVSS5.7AI score0.00337EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/16 12:0 a.m.11 views

PT-2024-17594 · WordPress · Crm Perks – Wordpress Helpdesk Integration – Zendesk

Name of the Vulnerable Software and Affected Versions: The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress versions up to, and including, 1.1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets'...

6.4CVSS7.9AI score0.00337EPSS
SaveExploits0References9
NVD
NVD
added 2024/12/13 3:15 p.m.8 views

CVE-2024-54274

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Octrace WordPress HelpDesk & Support Ticket System Plugin – Octrace Support octrace-support allows Reflected XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace...

7.1CVSS0.00418EPSS
SaveExploits0References1
Citrix
Citrix
added 2024/12/03 12:0 a.m.16 views

Failed to open the resources after the upgrading CWA for Windows to 2409

After upgrading CWA Windows to 2409, if any PNAgent stores are configured e.g.,https://url/citrix/store/pnagent/config.xml , CWA shows an error message on refresh or sign-in stating, “To resolve this issue, contact your helpdesk with this information: Error while parsing.”...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/11/06 12:0 a.m.9 views

The vulnerability of the JetBrains YouTrac project management and task management software is related to the use of a regular expression with inefficient computational complexity, which can lead to service failures.

The vulnerability of the YouTrack Helpdesk service relates to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure by parsing email headers within the Helpdesk functionality...

7.8CVSS5.5AI score0.00605EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2024/11/01 4:15 p.m.35 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

8.8CVSS0.00448EPSS
SaveExploits1References2
OSV
OSV
added 2024/11/01 4:15 p.m.5 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

5.4CVSS6.1AI score0.00448EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2024/11/01 10:20 a.m.20 views

5 SaaS Misconfigurations Leading to Major Fu*%@ Ups

With so many SaaS applications, a range of configuration options, API capabilities, endless integrations, and app-to-app connections, the SaaS risk possibilities are endless. Critical organizational assets and data are at risk from malicious actors, data breaches, and insider threats, which pose...

7.9AI score
SaveExploits0
Cvelist
Cvelist
added 2024/11/01 12:0 a.m.37 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

0.00448EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.4 views

PT-2024-34613 · Ladybird Web Solution · Ladybird Web Solution Faveo Helpdesk & Servicedesk

Name of the Vulnerable Software and Affected Versions: Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud version 9.2.0 Description: An issue in the software allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. This enables the attacker to...

8.8CVSS8.1AI score0.00448EPSS
SaveExploits1References6
CVE
CVE
added 2024/11/01 12:0 a.m.65 views

CVE-2024-51377

CVE-2024-51377 affects Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) v9.2.0. The issue allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. In the connected sources, the vulnerability is documented across multiple feeds (including R...

8.8CVSS8AI score0.00448EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.5 views

Faveo Helpdesk 安全漏洞

Faveo Helpdesk is an open source ticketing system built on the Laravel framework by Ladybird Web Solution. Provides organizations with an automated helpdesk system to manage customer support. A security vulnerability exists in Faveo Helpdesk version 9.2.0 that originates from a remote attacker wh...

8.8CVSS7.9AI score0.00448EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/11/01 12:0 a.m.16 views

JetBrains YouTrack < 2024.3.47707 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.47707. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Potential ReDoS exploit was possible via email header parsing in Helpdesk functionality CVE-2024-50574 - Reflecte...

7.5CVSS5.5AI score0.00605EPSS
SaveExploits0References10
OSV
OSV
added 2024/10/28 1:15 p.m.5 views

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

7.5CVSS5.8AI score0.00605EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/28 1:15 p.m.25 views

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

7.5CVSS0.00605EPSS
SaveExploits0References1
Rows per page
Query Builder