Lucene search
+L

269 matches found

CNNVD
CNNVD
added 2021/01/15 12:0 a.m.10 views

Solarwinds Web Help Desk 跨站脚本漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. SolarWinds Web Help Desk 12.7.0 suffers from a cross-site scripting vulnerability that...

5.4CVSS5.9AI score0.0147EPSS
SaveExploits1References4
CNVD
CNVD
added 2021/01/08 12:0 a.m.29 views

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2021-01997)

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0 that...

5.4CVSS5.4AI score0.0171EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/07 12:0 a.m.7 views

SolarWinds Web Help Desk HTML Injection Vulnerability

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. An HTML injection vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct an HTML injection attack via a Comment in a Help Request work order...

5.4CVSS6.9AI score0.01327EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/06 5:15 p.m.5 views

CVE-2019-16954

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

5.4CVSS6.1AI score0.01327EPSS
SaveExploits1References3
Prion
Prion
added 2021/01/06 5:15 p.m.10 views

Design/Logic Flaw

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

4.9CVSS5.6AI score0.01327EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2021/01/06 4:53 p.m.42 views

CVE-2019-16954

CVE-2019-16954 affects SolarWinds Web Help Desk 12.7.0 with an HTML injection vulnerability via the Comment in a Help Request ticket. The provided connected documents indicate the flaw is caused by accepting user input in a Comment and injecting it into HTML, but do not provide explicit exploit s...

5.4CVSS5.6AI score0.01327EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/01/06 4:53 p.m.30 views

CVE-2019-16954

SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket...

5.7AI score0.01327EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/01/05 12:0 a.m.6 views

SolarWinds Web Help Desk Cross-Site Scripting Vulnerability (CNVD-2021-01529)

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct a cross-site scripting attack via a CSV template file with a specially craft...

5.4CVSS6.1AI score0.01331EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/04 8:15 a.m.7 views

CVE-2019-16960

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

5.4CVSS6.1AI score0.01331EPSS
SaveExploits1References3
NVD
NVD
added 2021/01/04 8:15 a.m.21 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.4CVSS5.3AI score0.0171EPSS
SaveExploits1References3
NVD
NVD
added 2021/01/04 8:15 a.m.27 views

CVE-2019-16960

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

5.4CVSS5.2AI score0.01331EPSS
SaveExploits1References3
OSV
OSV
added 2021/01/04 8:15 a.m.6 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.4CVSS5.8AI score0.0171EPSS
SaveExploits1References3
Prion
Prion
added 2021/01/04 8:15 a.m.18 views

Cross site request forgery (csrf)

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

3.5CVSS5.2AI score0.0171EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/01/04 8:15 a.m.19 views

Design/Logic Flaw

SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field...

3.5CVSS5.2AI score0.01331EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2021/01/04 7:56 a.m.38 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket...

5.3AI score0.0171EPSS
SaveExploits1References3
CVE
CVE
added 2021/01/04 7:56 a.m.207 views

CVE-2019-16956

SolarWinds Web Help Desk 12.7.0 is affected by a Cross‑Site Scripting (XSS) vulnerability exploitable via the Request Type parameter in a ticket. The connected sources confirm the affected product and vulnerability class but do not provide exploit details, affected versions beyond 12.7.0, or a re...

5.4CVSS5.3AI score0.0171EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.9 views

Solarwinds WebHelpDesk 跨站脚本漏洞

SolarWinds Web Help Desk is a web-based help desk work order and IT asset management software. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0. The vulnerability can be exploited to conduct a cross-site scripting attack via a CSV template file with a specially craft...

5.4CVSS5.9AI score0.01331EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/01/04 12:0 a.m.8 views

SolarWinds Web Help Desk 跨站脚本漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports centralized knowledge base, IT asset management, project and task management, and more. A cross-site scripting vulnerability exists in SolarWinds Web Help Desk 12.7.0 that...

5.4CVSS5.9AI score0.0171EPSS
SaveExploits1References4
NVD
NVD
added 2020/12/21 4:15 p.m.24 views

CVE-2019-16959

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...

6.5CVSS6.4AI score0.0163EPSS
SaveExploits1References3
OSV
OSV
added 2020/12/21 4:15 p.m.5 views

CVE-2019-16959

SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket...

6.5CVSS6.6AI score0.0163EPSS
SaveExploits1References3
Rows per page
Query Builder