Lucene search
+L

1202 matches found

Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.23 views

PT-2024-17594 · WordPress · Crm Perks – Wordpress Helpdesk Integration – Zendesk

Name of the Vulnerable Software and Affected Versions: The CRM Perks – WordPress HelpDesk Integration – Zendesk, Freshdesk, HelpScout plugin for WordPress versions up to, and including, 1.1.6 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'crm-perks-tickets'...

6.4CVSS7.9AI score0.00337EPSS
SaveExploits0References9
NVD
NVD
added 2024/12/13 3:15 p.m.12 views

CVE-2024-54274

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Octrace WordPress HelpDesk & Support Ticket System Plugin – Octrace Support octrace-support allows Reflected XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace...

7.1CVSS0.00418EPSS
SaveExploits0References1
Citrix
Citrix
added 2024/12/03 12:00 a.m.18 views

Failed to open the resources after the upgrading CWA for Windows to 2409

After upgrading CWA Windows to 2409, if any PNAgent stores are configured e.g.,https://url/citrix/store/pnagent/config.xml , CWA shows an error message on refresh or sign-in stating, “To resolve this issue, contact your helpdesk with this information: Error while parsing.”...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/11/06 12:00 a.m.12 views

The vulnerability of the JetBrains YouTrac project management and task management software is related to the use of a regular expression with inefficient computational complexity, which can lead to service failures.

The vulnerability of the YouTrack Helpdesk service relates to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure by parsing email headers within the Helpdesk functionality...

7.8CVSS5.5AI score0.00631EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2024/11/01 4:15 p.m.8 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

5.4CVSS6.1AI score0.00454EPSS
SaveExploits1References2
NVD
NVD
added 2024/11/01 4:15 p.m.48 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

8.8CVSS0.00454EPSS
SaveExploits1References2
The Hacker News
The Hacker News
added 2024/11/01 10:20 a.m.20 views

5 SaaS Misconfigurations Leading to Major Fu*%@ Ups

With so many SaaS applications, a range of configuration options, API capabilities, endless integrations, and app-to-app connections, the SaaS risk possibilities are endless. Critical organizational assets and data are at risk from malicious actors, data breaches, and insider threats, which pose...

7.9AI score
SaveExploits0
CNNVD
CNNVD
added 2024/11/01 12:00 a.m.7 views

Faveo Helpdesk 安全漏洞

Faveo Helpdesk is an open source ticketing system built on the Laravel framework by Ladybird Web Solution. Provides organizations with an automated helpdesk system to manage customer support. A security vulnerability exists in Faveo Helpdesk version 9.2.0 that originates from a remote attacker wh...

8.8CVSS7.9AI score0.00454EPSS
SaveExploits1References2
CVE
CVE
added 2024/11/01 12:00 a.m.76 views

CVE-2024-51377

CVE-2024-51377 affects Ladybird Web Solution Faveo Helpdesk & Servicedesk (On-Premise and Cloud) v9.2.0. The issue allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. In the connected sources, the vulnerability is documented across multiple feeds (including R...

8.8CVSS8AI score0.00454EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2024/11/01 12:00 a.m.47 views

CVE-2024-51377

An issue in Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud 9.2.0 allows a remote attacker to execute arbitrary code via the Subject and Identifier fields...

0.00454EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/11/01 12:00 a.m.19 views

JetBrains YouTrack < 2024.3.47707 Multiple Vulnerabilities

The version of JetBrains YouTrack installed on the remote host is prior to 2024.3.47707. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Potential ReDoS exploit was possible via email header parsing in Helpdesk functionality CVE-2024-50574 - Reflecte...

7.5CVSS5.5AI score0.00631EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2024/11/01 12:00 a.m.12 views

PT-2024-34613 · Ladybird Web Solution · Ladybird Web Solution Faveo Helpdesk & Servicedesk

Name of the Vulnerable Software and Affected Versions: Ladybird Web Solution Faveo Helpdesk & Servicedesk On-Premise and Cloud version 9.2.0 Description: An issue in the software allows a remote attacker to execute arbitrary code via the Subject and Identifier fields. This enables the attacker to...

8.8CVSS8.1AI score0.00454EPSS
SaveExploits1References6
OSV
OSV
added 2024/10/28 1:15 p.m.9 views

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

7.5CVSS5.8AI score0.00631EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/28 1:15 p.m.30 views

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

7.5CVSS0.00631EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 12:55 p.m.14 views

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

5.3CVSS5.3AI score0.00631EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/28 12:55 p.m.75 views

CVE-2024-50574

JetBrains YouTrack before 2024.3.47707 is affected by CVE-2024-50574: a potential ReDoS via email header parsing in Helpdesk. The issue is described in multiple sources as a denial of service risk with availability impact (per CVSS notes: HIGH). No explicit exploit details or active exploit statu...

7.5CVSS7AI score0.00631EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/28 12:55 p.m.36 views

CVE-2024-50574

In JetBrains YouTrack before 2024.3.47707 potential ReDoS exploit was possible via email header parsing in Helpdesk functionality...

5.3CVSS0.00631EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/22 10:15 p.m.41 views

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

8.2CVSS0.00358EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/22 12:00 a.m.20 views

CVE-2024-46482

An arbitrary file upload vulnerability in the Ticket Generation function of Ladybird Web Solution Faveo-Helpdesk v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .html or .svg file...

7.8AI score0.00358EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.13 views

Faveo Helpdesk 安全漏洞

Faveo Helpdesk is an open source ticketing system built by Faveo based on Laravel framework. A security vulnerability exists in Faveo Helpdesk v2.0.3, which stems from an arbitrary file upload issue in the Ticket Generation feature...

8.2CVSS7.1AI score0.00358EPSS
SaveExploits0References2
Rows per page
Query Builder