CVE-2019-13076

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticketlist.php, and affected parameters are order0column and order0dir...

Design/Logic Flaw

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability via the title field in the /common/ticketassociatedtickets.php service desk ticket functionality that allows an authenticated user to execute arbitrary JavaScript in a service desk user's browser...

CVE-2019-13076

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticketlist.php, and affected parameters are order0column and order0dir...

CVE-2019-13076

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. An authenticated user has the ability to execute arbitrary commands against the database. The affected component is /userui/ticketlist.php, and affected parameters are order0column and order0dir...

PT-2020-9824 · Otrs +2 · Otrs +2

Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS versions 7.0.x through 7.0.11 Open Ticket Request System OTRS Community Edition versions 5.0.x through 5.0.37 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.22 Description: An issu...

October 15, 2019—KB4520015 (Preview of Monthly Rollup)

None None...

Insecure Randomness

Overview org.apereo.cas:cas-server-core-services-api is a library used within Apereo CAS for Apereo CAS Core Services API. Affected versions of this package are vulnerable to Insecure Randomness. A insecure source of randomness is used to generate all of its random values as it relies upon apache...

Insecure Randomness

Overview org.apereo.cas:cas-server-support-oauth-core-api is a CAS Server Support OAuth Core API for supporting OAuth within Apereo CAS. Affected versions of this package are vulnerable to Insecure Randomness. A insecure source of randomness is used to generate all of its random values as it reli...

Insecure Randomness

Overview org.apereo.cas:cas-server-support-simple-mfa is an is package that allows Apereo CAS to act as a multifactor authentication provider on its own, issuing tokens and sending them to end-users via pre-defined communication channels such as email or text messages. Affected versions of this...

CVE-2016-10969

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...

CVE-2016-10970

The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...

CVE-2016-10969

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...

CVE-2016-10970

The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...

Design/Logic Flaw

The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...

Design/Logic Flaw

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...

CVE-2016-10970

CVE-2016-10970 affects the WordPress plugin SupportFlow ; it is a stored XSS vulnerability in the ticket excerpt. The issue is present in plugin versions before 0.7. No exploitation details are provided in the documents. Remediation, as implied, is to upgrade to 0.7 or later (the fix version is n...

CVE-2016-10970

The supportflow plugin before 0.7 for WordPress has XSS via a ticket excerpt...

CVE-2016-10969

The supportflow plugin before 0.7 for WordPress has XSS via a discussion ticket title...

CVE-2016-10969

CVE-2016-10969: The WordPress SupportFlow plugin is vulnerable to stored XSS via a discussion ticket title in versions before 0.7. The issue originates from the plugin’s handling of ticket titles, enabling script injection that could execute in a user’s browser. Affects the SupportFlow WordPress ...

Atlassian Jira CSRF Login Vulnerability

Summary An exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0. The login form doesn’t require a CSRF token. As a result, an attacker can log a user into the system under an unexpected account. Tested Versions Atlassian Jira 7.6.4 Atlassian Jira 8.1.0 Product URL...