1203 matches found
I-net Software HelpDesk 信任管理问题漏洞
I-net Software HelpDesk is a suite of service management helpdesk software from I-net Software, Germany. A trust management issue vulnerability exists in I-net Software HelpDesk versions prior to 3.3.3 that stems from improper certificate validation, which could allow a remote attacker to...
PT-2025-10103
Name of the Vulnerable Software and Affected Versions Helpdesk versions prior to 3.3.3 Description An improper certificate validation issue has been reported, which could allow remote attackers to compromise the system's security if exploited. Recommendations For versions prior to 3.3.3, update t...
CVE-2024-13568
The Fluent Support – Helpdesk & Customer Support Ticket System plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.5 via the 'fluent-support' directory. This makes it possible for unauthenticated attackers to extract sensitive data stored...
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
CVE-2020-2500
This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sensitive data on QNAP Kayako server with API keys. We have replaced the API key to mitigate the vulnerability, and already fixed the issue in Helpdesk 3.0.1 and...
CVE-2020-11465
An issue was discovered in Deskpro before 2019.8.0. The /api/apps/ endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak current applications' configurations, including applications used as user sources used for...
CVE-2024-12171
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'ehcrmagentadduser' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with...
CVE-2024-12171 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the 'ehcrmagentadduser' AJAX action in all versions up to, and including, 3.2.6. This makes it possible for authenticated attackers, with...
WordPress plugin ELEX WordPress HelpDesk & Customer Ticketing System 安全漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in the WordPress...
WordPress ELEX WordPress HelpDesk & Customer Ticketing System plugin <= 3.2.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation vulnerability
Missing Authorization to Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Thanh Nam Tran in WordPress Plugin ELEX WordPress HelpDesk & Customer Ticketing System versions = 3.2.6...
JetBrains YouTrack 2024.3.55417 Multiple Vulnerabilities
The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.55417. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024355417 advisory. - In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping...
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
CVE-2025-24458
In JetBrains YouTrack before 2024.3.55417 account takeover was possible via spoofed email and Helpdesk integration...
CVE-2025-24458
Summary (CVE-2025-24458): JetBrains YouTrack prior to 2024.3.55417 is affected by an account takeover vulnerability via spoofed email and Helpdesk integration. The vulnerability is described across multiple sources as allowing unauthorized access through manipulated emails and helpdesk workflows,...
JetBrains YouTrack 安全漏洞
JetBrains YouTrack is a project management tool developed by the Czech company JetBrains that supports cloud hosting and local deployment. JetBrains YouTrack suffers from a security vulnerability that stems from account takeover via spoofed emails and Helpdesk integration. No details of the...
PT-2025-5364 · Jetbrains · Youtrack
Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.55417 Description: The issue allows for account takeover via spoofed email and Helpdesk integration. This enables unauthorized access to accounts, potentially leading to data breaches or other...
PT-2025-4682 · WordPress · Wordpress Helpdesk & Support Ticket System Plugin – Octrace Support
Name of the Vulnerable Software and Affected Versions: Octrace Studio WordPress HelpDesk & Support Ticket System Plugin – Octrace Support versions 1.2.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows stored Cross-site...