Products: 1
Vulnerabilities: 4
Known Exploited: 0
1
Critical Level Threats
1
High Level Threats
2
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2023-37635
UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the application.
Last Modified: Nov 21, 2024
Published: Oct 23, 2023
CVE-2023-0325
Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket.
Last Modified: Feb 13, 2025
Published: Apr 04, 2023
CVE-2023-0265
Uvdesk version 1.1.1 allows an authenticated remote attacker to execute commands on the server. This is possible because the application does not properly validate profile pictures uploaded by customers.
Last Modified: Feb 13, 2025
Published: Apr 04, 2023
CVE-2023-1197
Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton
Last Modified: Mar 06, 2025
Published: Mar 06, 2023
Items Per Page
