Browse CVEs

HIGH 8.8 CVE-2022-29517EPSS 58% A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweeper 10.1.1.0. A specially-craf… Lansweeper No fix yet Fix from $1,9502022-12-15 HIGH 8.8 CVE-2022-32573 A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1.0. A specially-crafted HTTP … Lansweeper No fix yet Fix from $1,9502022-12-15 MEDIUM 6.5 CVE-2022-29511 A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles functionality of Lansweeper lansweeper 10.1.1.0. A spe… Lansweeper No fix yet Fix from $1,6002022-12-15 MEDIUM 6.1 CVE-2022-32763 A cross-site scripting (xss) sanitization vulnerability bypass exists in the SanitizeHtml functionality of Lansweeper lansweeper 10.1.1.0. A speciall… Lansweeper No fix yet Fix from $1,6002022-12-15 MEDIUM 5.4 CVE-2022-28703 A stored cross-site scripting vulnerability exists in the HdConfigActions.aspx altertextlanguages functionality of Lansweeper lansweeper 10.1.1.0. A … Lansweeper No fix yet Fix from $1,6002022-12-15 MEDIUM 6.5 CVE-2022-27498EPSS 38% A directory traversal vulnerability exists in the TicketTemplateActions.aspx GetTemplateAttachment functionality of Lansweeper lansweeper 10.1.1.0. A… Lansweeper Mitigation only Fix from $1,6002022-12-15 HIGH 8.8 CVE-2022-21210EPSS 71% An SQL injection vulnerability exists in the AssetActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can … Lansweeper No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2022-21234EPSS 73% An SQL injection vulnerability exists in the EchoAssets.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP request can ca… Lansweeper No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2022-22149EPSS 73% A SQL injection vulnerability exists in the HelpdeskEmailActions.aspx functionality of Lansweeper lansweeper 9.1.20.2. A specially-crafted HTTP reque… Lansweeper No fix yet Fix from $1,9502022-04-14 HIGH 8.0 CVE-2020-13658 In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges wit… Lansweeper No fix yet Fix from $1,9502020-09-30 CRITICAL 9.8 CVE-2020-14011EPSS 29% Lansweeper 6.0.x through 7.2.x has a default installation in which the admin password is configured for the admin account, unless "Built-in admin" is… Lansweeper after 7.2.108.6 Fix from $2,3002020-06-15 MEDIUM 6.1 CVE-2019-18955 The web console in Lansweeper 7.2.105.2 has XSS via the URL path. Product vulnerability has been fixed and disclosed within changelog as of 02 Dec 20… Lansweeper Mitigation only Fix from $1,6002019-12-19 CRITICAL 9.1 CVE-2019-13462EPSS 11% Lansweeper before 7.1.117.4 allows unauthenticated SQL injection. Lansweeper 7.1.117.4+ Fix from $2,3002019-08-12 CRITICAL 9.8 CVE-2015-9264 Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstation via a crafted Windows servic… Lansweeper after 6.0.0.45 Fix from $2,3002018-08-27 MEDIUM 6.1 CVE-2017-16841 LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx. Lansweeper 6.0.100.94+ Fix from $1,6002017-11-16 CRITICAL 9.9 CVE-2017-13706 XML external entity (XXE) vulnerability in the import package functionality of the deployment module in Lansweeper before 6.0.100.67 allows remote au… Lansweeper after 6.0.100.29 Fix from $2,3002017-10-10 MEDIUM 6.1 CVE-2017-9292 Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782. Lansweeper after 6.0.0.64 Fix from $1,6002017-05-29