Vulnerabilities

TI-2023-09530 CVE-2023-23716 · GHSA-58v3-m92j-9vc2

WordPress Zendesk Support for WordPress plugin <= 1.8.4 - Broken Access Control vulnerability

LOW 21

Missing Authorization vulnerability in Zendesk Zendesk Support for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zendesk Support for WordPress: from n/a through 1.8.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00525 Published 2024-12-09 No fix listed CWE-862

TI-2024-28349 CVE-2024-42363

GHSL-2023-136_Samson

HIGH 73

Prior to 3385, the user-controlled role parameter enters the application in the Kubernetes::RoleVerificationsController.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0113 Published 2024-08-20 Fixed in 3385 CWE-502

TI-2021-14875 CVE-2021-36750 · GHSA-pj9c-cg8c-hvp4

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for…

MEDIUM 50

ENC DataVault before 7.2 and VaultAPI v67 mishandle key derivation, making it easier for attackers to determine the passwords of all DataVault users (across USB drives sold under multiple brand names).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.13526 Published 2021-12-22 No fix listed CWE-307

TI-2018-14819 CVE-2018-20857 · GHSA-qpxp-5j56-gg3x

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with…

LOW 35

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with [email protected] followed by .

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01205 Published 2019-07-26 Fixed in 2.6.2 CWE-20

TI-2015-05773 CVE-2015-6921 · GHSA-hqcv-x8w5-9578

Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x…

LOW 15

Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web scri…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.0075 Published 2015-09-11 No fix listed CWE-79