CVE-2023-2118

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints...

CVE-2023-2118

CVE-2023-2118 affects Devolutions Server 2023.1.5.0 and earlier. The issue is insufficient access control in the support ticket feature, enabling an authenticated attacker to send support tickets and download diagnostic files through specific endpoints. Impact is described as unauthorized access ...

CVE-2023-2118

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints...

CVE-2023-2118

Insufficient access control in support ticket feature in Devolutions Server 2023.1.5.0 and below allows an authenticated attacker to send support tickets and download diagnostic files via specific endpoints...

Users can set up workflows using restricted and invisible system tags

None...

Desktop client does not verify received singed certificate in end-to-end encryption

None...

User without download rights can download older version of that file

None...

Chat room membership disclosed via autocompletion when not a member yourself

None...

Reference fetch can saturate the server bandwidth for 10 seconds

None...

No password length restriction in reset password endpoint

None...

Potential directory traversal in OC\Files\Node\Folder::getFullPath

None...

SSRF via filter bypass due to lax checking on IPs

None...

CSRF vulnerability in Nextcloud Desktop Client on Windows when clicking malicious link

None...

nextcloudcmd incorrectly trusts bad TLS certificates

None...

Exception logging in Sharepoint app reveals clear-text connection details

None...

Profile of disabled user stays accessible

None...

WordPress YDS Support Ticket System Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2022-36388

Cross-Site Request Forgery CSRF vulnerability in YDS Support Ticket System plugin = 1.0 at WordPress...

CVE-2022-36388

Cross-Site Request Forgery CSRF vulnerability in YDS Support Ticket System plugin = 1.0 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in YDS Support Ticket System plugin = 1.0 at WordPress...