Browse CVEs

HIGH 7.8 CVE-2015-3000EPSS 8% SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested entity re… Sysaid after 15.1 Fix from $1,9502015-06-08 MEDIUM 6.5 CVE-2015-2999 Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (1) grou… Sysaid after 15.1 Fix from $1,6002015-06-08 MEDIUM 5.0 CVE-2015-2998EPSS 26% SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as demonstr… Sysaid after 15.1 Fix from $1,6002015-06-08 MEDIUM 5.0 CVE-2015-2997EPSS 57% SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAgentLogFi… Sysaid after 15.1 Fix from $1,6002015-06-08 HIGH 8.5 CVE-2015-2996EPSS 87% Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in… Sysaid after 15.1 Fix from $1,9502015-06-08 MEDIUM 6.8 CVE-2015-2995EPSS 34% The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute… Sysaid after 15.1 Fix from $1,6002015-06-08 MEDIUM 6.5 CVE-2015-2994EPSS 50% Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary code by u… Sysaid after 15.1 Fix from $1,6002015-06-08 HIGH 7.5 CVE-2015-2993EPSS 55% SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create administrator ac… Sysaid after 15.1 Fix from $1,9502015-06-08 MEDIUM 5.0 CVE-2014-9436EPSS 7% Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\\\ (four backslashes… Sysaid after 14.4 Fix from $1,6002015-01-02