CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 21/12/2020 |
| CVE-2019-16957 | 보통5.4 | SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. | 18/12/2020 |
| CVE-2019-16955 | 보통5.4 | SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. | 18/12/2020 |
| CVE-2019-20002 | 높음7.8 | Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a TicketActions/view?tab=group TSV export by an admin user. | 27/04/2020 |