CVE-2026-23758

< 4.99.9

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that allows authentic

5.4MEDIUM

CVE-2026-23757

< 4.99.10

GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter

5.4MEDIUM

CVE-2026-23756

< 4.99.9

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject PO

5.4MEDIUM

CVE-2026-23753

< 4.99.9

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where th

4.8MEDIUM

CVE-2026-23752

< 4.99.9

GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functi

4.8MEDIUM

CVE-2025-10655

all versions

SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters int

8.8HIGH

CVE-2024-50394

>= 3.3.1 and < 3.3.3

An improper certificate validation vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow

8.8HIGH

CVE-2024-27125

< 3.3.1

A cross-site scripting (XSS) vulnerability has been reported to affect Helpdesk. If exploited, the vulnerability could allow authe

3.5LOW

CVE-2021-33353

< 1.3.7

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to

9.8CRITICAL

CVE-2021-33352

< 1.3.7

An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code vi

9.8CRITICAL

CVE-2021-33351

< 1.3.7

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attacke

9.0CRITICAL

CVE-2022-40325

< 22.1.65

SysAid Help Desk before 22.1.65 allows XSS via the Asset Dashboard, aka FR# 67262.

6.1MEDIUM

CVE-2022-40324

< 22.1.65

SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.

6.1MEDIUM

CVE-2022-40323

< 22.1.65

SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.

6.1MEDIUM

CVE-2022-40322

< 22.1.65

SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.

6.1MEDIUM

CVE-2021-28814

< 3.0.4

An improper access control vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows remote atta

8.8HIGH

CVE-2020-2507

< 3.0.3

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could a

9.8CRITICAL

CVE-2020-2506

< 3.0.3

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability c

7.3HIGH

CVE-2018-19948

< 3.0.3

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this cross-site request forgery (CSRF)

2.0LOW

CVE-2018-19947

< 3.0.3

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability

4.3MEDIUM

CVE-2018-19946

< 3.0.3

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vu

4.2MEDIUM

CVE-2020-2500

< 3.0.1

This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can acces

9.8CRITICAL

CVE-2020-11431

>= 8.0 and <= 8.3

The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthen

9.1CRITICAL

CVE-2018-0728

< 3.0.0

This improper access control vulnerability in Helpdesk allows attackers to access the system logs. To fix the vulnerability, QNAP

7.5HIGH

CVE-2018-0714

<= 1.1.21

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528

9.8CRITICAL

CVE-2006-6366

all versions

Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7

CVE-2006-6158

all versions

Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also so