znuny vulnerabilities (Debian)
23 vulnerabilities.
-
znunyDebian Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user... 8.6 High -
znunyDebian In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain... 9.5 Critical -
znunyDebian Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. 4.8 Medium -
znunyDebian In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in ... 6.4 Medium -
znunyDebian IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. 5.4 Medium -
znunyDebian SQL Injection via MySQL Quote Method 9.1 Critical -
znunyDebian [Unknown description] No score -
znunyDebian A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl... 6.1 Medium -
znunyDebian An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using... 9.8 Critical -
znunyDebian An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the... 6.1 Medium -
znunyDebian An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all... 7.5 High -
znunyDebian An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the... 9.8 Critical -
znunyDebian An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag. 9.8 Critical -
znunyDebian An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content... 7.5 High -
znunyDebian jquery-validation vulnerable to Cross-site Scripting 5.3 Medium -
znunyDebian canvg Prototype Pollution vulnerability 9.8 Critical -
znunyDebian Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.... 7.5 High -
znunyDebian Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the... 6.1 Medium -
znunyDebian An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a... 8.8 High -
znunyDebian An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0... 9.8 Critical -
znunyDebian Host header injection by attachments in web service 6.3 Medium -
znunyDebian SQL Injection via OTRS Search API 6.5 Medium -
znunyDebian [Unknown description] No score