Spiceworks vulnerabilities

Products

• Spiceworks 7

Newest

• spiceworks help desk server An issue was discovered in Spiceworks Help Desk Server before 1.3.3. A Blind Boolean SQL... CVE-2021-43609 Public exploit 9.9 CriticalNovember 8, 2023
• spiceworks Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that... CVE-2020-25901 Public exploit 6.1 MediumDecember 18, 2020
• spiceworks Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "... CVE-2020-23451 8.8 HighSeptember 15, 2020
• spiceworks Spiceworks Version <= 7.5.00107 is affected by XSS. Any name typed on Custom Groups function is... CVE-2020-23450 5.4 MediumSeptember 1, 2020
• spiceworks desktop Spiceworks Desktop before 2015-12-01 has XSS via an SNMP response. CVE-2015-6021 6.1 MediumApril 10, 2017
• spiceworks The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers... CVE-2017-7237 Public exploit 9.8 CriticalApril 6, 2017
• spiceworks Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote... CVE-2012-6658 Public exploit 4.3 MediumSeptember 17, 2014
• spiceworks SQL injection vulnerability in SpiceWorks 5.3.75941 allows remote authenticated users to execute... CVE-2012-2956 Public exploit 6.5 MediumSeptember 17, 2014
• spiceworks Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote... CVE-2014-3740 Public exploit 3.5 LowSeptember 11, 2014