Vulnerability index

Browse CVEs

38 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Freescout CRITICAL 9.8
CVE-2026-40498

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can access diagnostic and system …

Fix: 1.8.213+
Fix from $2,300 2026-04-21
Freescout MEDIUM 6.1
CVE-2026-40565

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function in app/Misc/Helper.php convert…

Fix: 1.8.213+
Fix from $1,600 2026-04-21
Freescout HIGH 8.1
CVE-2026-40497

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's `Helper::stripDangerousTags()` removes `<script>`…

Fix: 1.8.213+
Fix from $1,950 2026-04-21
Freescout CRITICAL 9.1
CVE-2026-40496

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, attachment download tokens are generated using a weak and pre…

Fix: 1.8.213+
Fix from $2,300 2026-04-21
Freescout HIGH 7.6
CVE-2026-39384

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, FreeScout does not take the limit_user_customer_…

Fix: 1.8.212+
Fix from $1,950 2026-04-07
Freescout MEDIUM 6.5
CVE-2026-35584

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.212, the endpoint GET /thread/read/{conversation_id}/…

Fix: 1.8.212+
Fix from $1,600 2026-04-07
Freescout MEDIUM 6.1
CVE-2026-34442

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, host header manipulation in FreeScout ve…

Fix: 1.8.211+
Fix from $1,600 2026-03-31
Freescout MEDIUM 5.3
CVE-2026-34443

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.211, checkIpByMask() in app/Misc/Helper.php c…

Fix: 1.8.211+
Fix from $1,600 2026-03-31
Freescout CRITICAL 9.3
CVE-2026-32754

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.208 and below are vulnerable to Stored Cross-Site Scr…

Fix: 1.8.209+
Fix from $2,300 2026-03-19
Freescout HIGH 8.1
CVE-2026-32752

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, the ThreadPolicy::edit() method con…

Fix: 1.8.209+
Fix from $1,950 2026-03-19
Freescout MEDIUM 5.4
CVE-2026-32753

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. In versions 1.8.208 and below, bypasses of the attachment view log…

Fix: 1.8.209+
Fix from $1,600 2026-03-19
Freescout HIGH 8.1
CVE-2026-28289EPSS 31%

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.2…

Fix: 1.8.207+
Fix from $1,950 2026-03-03
Freescout CRITICAL 9.8
CVE-2026-27637

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's `TokenAuth` middleware uses …

Fix: 1.8.206+
Fix from $2,300 2026-02-25
Freescout HIGH 8.8
CVE-2026-27636

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.206, FreeScout's file upload restriction list…

Fix: 1.8.206+
Fix from $1,950 2026-02-25
Freescout HIGH 8.8
CVE-2025-58163

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Versions 1.8.185 and earlier contain a deserialization of untruste…

Fix: 1.8.186+
Fix from $1,950 2025-09-03
Freescout HIGH 8.8
CVE-2025-54366

FreeScout is a lightweight free open source help desk and shared inbox built with PHP (Laravel framework). In versions 1.8.185 and below, there is a …

Fix: 1.8.86+
Fix from $1,950 2025-07-26
Freescout MEDIUM 6.6
CVE-2025-48880

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, when an administrative account is a deleting a user, there is…

Fix: 1.8.181+
Fix from $1,600 2025-05-30
Freescout MEDIUM 5.4
CVE-2025-48875

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.181, the system's incorrect validation of last_name and first_name…

Fix: 1.8.181+
Fix from $1,600 2025-05-30
Freescout MEDIUM 5.4
CVE-2025-48486

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the cross-site scripiting (XSS) vulnerability is caused by th…

Fix: 1.8.180+
Fix from $1,600 2025-05-30
Freescout MEDIUM 5.4
CVE-2025-48488

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an H…

Fix: 1.8.180+
Fix from $1,600 2025-05-30
Freescout MEDIUM 5.4
CVE-2025-48485

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) a…

Fix: 1.8.180+
Fix from $1,600 2025-05-30
Freescout MEDIUM 5.4
CVE-2025-48483

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application is vulnerable to Cross-Site Scripting (XSS) a…

Fix: 1.8.180+
Fix from $1,600 2025-05-30
Freescout MEDIUM 5.4
CVE-2025-48484

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application is vulnerable to Cross-Site Scripting (XSS) a…

Fix: 1.8.178+
Fix from $1,600 2025-05-30
Freescout CRITICAL 9.8
CVE-2025-48481

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, an attacker with an unactivated email invitation containing i…

Fix: 1.8.180+
Fix from $2,300 2025-05-30
Freescout HIGH 8.1
CVE-2025-48477

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application's logic requires the user to perform a correc…

Fix: 1.8.180+
Fix from $1,950 2025-05-30
Freescout HIGH 8.8
CVE-2025-48476

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, when adding and editing user records using the fill() method,…

Fix: 1.8.180+
Fix from $1,950 2025-05-30
Freescout HIGH 8.1
CVE-2025-48475

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the…

Fix: 1.8.180+
Fix from $1,950 2025-05-29
Freescout HIGH 8.1
CVE-2025-48474

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access rights for con…

Fix: 1.8.180+
Fix from $1,950 2025-05-29
Freescout CRITICAL 9.8
CVE-2025-48471

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, the application does not check or performs insufficient check…

Fix: 1.8.179+
Fix from $2,300 2025-05-29
Freescout HIGH 8.1
CVE-2025-48472

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.179, there is no check to ensure that the user is disabling notifi…

Fix: 1.8.179+
Fix from $1,950 2025-05-29