Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-42235 1 Enhancesoft 1 Osticket 2024-11-21 9.8 Critical
SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality.
CVE-2020-24917 1 Enhancesoft 1 Osticket 2024-11-21 6.1 Medium
osTicket before 1.14.3 allows XSS via a crafted filename to DraftAjaxAPI::_uploadInlineImage() in include/ajax.draft.php.
CVE-2020-22609 1 Enhancesoft 1 Osticket 2024-11-21 6.1 Medium
Cross Site Scripting (XSS) vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter in include/class.queue.php.
CVE-2020-22608 1 Enhancesoft 1 Osticket 2024-11-21 6.1 Medium
Cross Site Scripting vulnerability in Enhancesoft osTicket before v1.12.6 via the queue-name parameter to include/ajax.search.php.
CVE-2020-16193 1 Enhancesoft 1 Osticket 2024-11-21 5.4 Medium
osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call.
CVE-2020-14012 1 Enhancesoft 1 Osticket 2024-11-21 5.4 Medium
scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent.
CVE-2020-12629 1 Enhancesoft 1 Osticket 2024-11-21 5.4 Medium
include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.
CVE-2019-13397 1 Enhancesoft 1 Osticket 2024-11-21 N/A
Unauthenticated Stored XSS in osTicket 1.10.1 allows a remote attacker to gain admin privileges by injecting arbitrary web script or HTML via arbitrary file extension while creating a support ticket.
CVE-2018-7195 1 Enhancesoft 1 Osticket 2024-11-21 N/A
Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords (when an associated e-mail address is known) by leveraging guest access and guessing a 6-digit number.