Vulnerabilidades em polonel

30 resultados
Análise Vexday

A polonel apresenta 18 vulnerabilidades catalogadas, com 8 classificadas como críticas, mas nenhuma sob exploração ativa conhecida. O risco dominante concentra-se em problemas de overflow aritmético (CWE-190), típicos de falhas em validação numérica. A ausência de publicações recentes sugere que o inventário de vulnerabilidades é histórico, reduzindo a urgência de remediação imediata, embora as críticas demandem atenção prioritária.

CVE-2022-1808HIGHExecution with Unnecessary Privileges in polonel/trudeskEPSS 3.8%CVE-2022-2023CRITICALIncorrect Use of Privileged APIs in polonel/trudeskEPSS 3.2%CVE-2022-2128CRITICALUnrestricted Upload of File with Dangerous Type in polonel/trudeskEPSS 2.9%CVE-2022-1770CRITICALImproper Privilege Management in polonel/trudeskEPSS 2.6%CVE-2022-1775HIGHWeak Password Requirements in polonel/trudeskEPSS 2.2%CVE-2022-1752CRITICALUnrestricted Upload of File with Dangerous Type in polonel/trudeskEPSS 1.9%CVE-2022-1931CRITICALIncorrect Synchronization in polonel/trudeskEPSS 1.7%CVE-2022-1290CRITICALStored XSS in "Name", "Group Name" & "Title" in polonel/trudeskEPSS 1.7%CVE-2022-1803HIGHImproper Restriction of Rendered UI Layers or Frames in polonel/trudeskEPSS 1.6%CVE-2022-1045CRITICALStored XSS viva .svg file upload in polonel/trudeskEPSS 1.6%CVE-2022-1947CRITICALUse of Incorrect Operator in polonel/trudeskEPSS 1.3%CVE-2022-1718HIGHThe trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudeskEPSS 1.1%CVE-2022-1754HIGHInteger Overflow or Wraparound in polonel/trudeskEPSS 1.0%CVE-2022-1926HIGHInteger Overflow or Wraparound in polonel/trudeskEPSS 1.0%CVE-2022-1728HIGHAllowing long password leads to denial of service in polonel/trudesk in polonel/trudeskEPSS 1.0%CVE-2022-1044HIGHSensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudeskEPSS 0.9%CVE-2022-1893MEDIUMImproper Removal of Sensitive Information Before Storage or Transfer in polonel/trudeskEPSS 0.8%CVE-2022-1719MEDIUMReflected XSS on ticket filter function in polonel/trudeskEPSS 0.7%CVE-2026-114397HIGHTrudesk through 1.2.11 Missing Authentication on Debug RoutesEPSS 0.6%CVE-2026-114399HIGHTrudesk through 1.2.11 Path Traversal via Backup Delete and Restore APIEPSS 0.6%