Export limit exceeded: 425822 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425822 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Export limit exceeded: 425822 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2021-28024

Unauthorized system access in the login form in ServiceTonic Helpdesk software version < 9.0.35937 allows attacker to login without using a password.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Servicetonic
Products
Servicetonic
CVE-2021-28023

Arbitrary file upload in Service import feature in ServiceTonic Helpdesk software version < 9.0.35937 allows a malicious user to execute JSP code by uploading a zip that extracts files in relative paths.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Servicetonic
Products
Servicetonic
CVE-2021-28022

Blind SQL injection in the login form in ServiceTonic Helpdesk software < 9.0.35937 allows attacker to exfiltrate information via specially crafted HQL-compatible time-based SQL queries.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Servicetonic
Products
Servicetonic