Vulnerability index

Browse CVEs

39 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sysaid HIGH 7.8
CVE-2015-3000EPSS 8%

SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity re…

Fix: after 15.1
Fix from $1,950 2015-06-08
Sysaid MEDIUM 6.5
CVE-2015-2999

Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (1) grou…

Fix: after 15.1
Fix from $1,600 2015-06-08
Sysaid MEDIUM 5.0
CVE-2015-2998EPSS 26%

SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstr…

Fix: after 15.1
Fix from $1,600 2015-06-08
Sysaid MEDIUM 5.0
CVE-2015-2997EPSS 57%

SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFi…

Fix: after 15.1
Fix from $1,600 2015-06-08
Sysaid HIGH 8.5
CVE-2015-2996EPSS 87%

Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in…

Fix: after 15.1
Fix from $1,950 2015-06-08
Sysaid MEDIUM 6.8
CVE-2015-2995EPSS 34%

The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute…

Fix: after 15.1
Fix from $1,600 2015-06-08
Sysaid MEDIUM 6.5
CVE-2015-2994EPSS 50%

Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by u…

Fix: after 15.1
Fix from $1,600 2015-06-08
Sysaid HIGH 7.5
CVE-2015-2993EPSS 55%

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator ac…

Fix: after 15.1
Fix from $1,950 2015-06-08
Sysaid MEDIUM 5.0
CVE-2014-9436EPSS 7%

Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\\\ (four backslashes…

Fix: after 14.4
Fix from $1,600 2015-01-02