znuny vulnerabilities (Ubuntu)
52 vulnerabilities.
-
znunyUbuntu Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user... 8.6 High -
znunyUbuntu In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain... 9.5 Critical -
znunyUbuntu Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication 9.4 Critical -
znunyUbuntu Insufficient Neutralization of Formula Elements in CSV Exports 6.1 Medium -
znunyUbuntu Duplicate Identity / Identity Shadowing across CustomerUser backends 5.4 Medium -
znunyUbuntu Cross-Site Request Forgery in Administrative Actions 4.3 Medium -
znunyUbuntu Insufficient Session Revocation for JWT Authentication 9.1 Critical -
znunyUbuntu Unauthenticated Disclosure of Agent Frontend Configuration 5.3 Medium -
znunyUbuntu Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory 8.7 High -
znunyUbuntu Stored XSS in external pages 4.8 Medium -
znunyUbuntu Cross-Site Request Forgery in Import/Export Admin console 5.4 Medium -
znunyUbuntu Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS. 4.8 Medium -
znunyUbuntu In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in ... 6.4 Medium -
znunyUbuntu IN Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences. 5.4 Medium -
znunyUbuntu SQL Injection via MySQL Quote Method 9.1 Critical -
znunyUbuntu [Unknown description] No score -
znunyUbuntu Possible DoS via SQL Box 4.5 Medium -
znunyUbuntu A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl... 6.1 Medium -
znunyUbuntu An issue was discovered in Znuny before 7.1.4. Permissions are not checked properly when using... 9.8 Critical -
znunyUbuntu An issue was discovered in Znuny through 6.5.14 and 7.x through 7.1.6. Custom AJAX calls to the... 6.1 Medium -
znunyUbuntu An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all... 7.5 High -
znunyUbuntu An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the... 9.8 Critical -
znunyUbuntu An issue was discovered in Znuny through 7.1.3. A cookie is set without the HttpOnly flag. 9.8 Critical -
znunyUbuntu An issue was discovered in Znuny through 7.1.3. If access to a ticket is not given, the content... 7.5 High -
znunyUbuntu jquery-validation vulnerable to Cross-site Scripting 5.3 Medium -
znunyUbuntu canvg Prototype Pollution vulnerability 9.8 Critical -
znunyUbuntu Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email.... 7.5 High -
znunyUbuntu Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the... 6.1 Medium -
znunyUbuntu Passwords are written to Admin Log Module 8.2 High -
znunyUbuntu Stored XSS in process management 4.9 Medium -
znunyUbuntu Stored XSS in System Configuration 4.9 Medium -
znunyUbuntu Upload of files outside application directory 6.3 Medium -
znunyUbuntu An issue was discovered in Znuny LTS 6.5.1 through 6.5.7 and Znuny 7.0.1 through 7.0.16 where a... 8.8 High -
znunyUbuntu An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the... 7.1 High -
znunyUbuntu An issue was discovered in Znuny and Znuny LTS 6.0.31 through 6.5.7 and Znuny 7.0.1 through 7.0... 9.8 Critical -
znunyUbuntu Missing file type check in avatar picture upload 3.5 Low -
znunyUbuntu Unnecessary data is written to log if issues during indexing occurs 4.9 Medium -
znunyUbuntu Insufficient access control 5.3 Medium -
znunyUbuntu Possible XSS execution in customer information 3.5 Low -
znunyUbuntu External pictures can be loaded even if not allowed by configuration 5.3 Medium -
znunyUbuntu SSL Certificates are not checked for E-Mail Handling 8.7 High -
znunyUbuntu Host header injection by attachments in web service 6.3 Medium -
znunyUbuntu Tickets can be moved without permissions 4.1 Medium -
znunyUbuntu XSS stored in survey answers 4.1 Medium -
znunyUbuntu Code execution via System Configuration 7.2 High -
znunyUbuntu Information exposure of template content due to missing check of permissions 3.5 Low -
znunyUbuntu DoS attack using email 7.5 High -
znunyUbuntu Perl Code execution in Template Toolkit 6.8 Medium -
znunyUbuntu Possible XSS stored in customer information 4.6 Medium -
znunyUbuntu Possible XSS in Admin Interface 3.5 Low - Show olderLoading…