Advisories · Technology
vsDesk.
Every CVE that names vsDesk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
) Missing Server-Side File Extension Validation in vsDesk
- vsDesk
- Unrestricted file upload
- CVSS 8.6 High
vsDesk Task Scheduler OS Command Injection
- vsDesk
- CWE-676
- CVSS 5.3 Medium
Weak File Name Generation in vsDesk
- vsDesk
- CWE-340
- CWE-377
- CVSS 9.3 CriticalCritical · CVSS 9+
Admin Account Takeover via Path Traversal in vsDesk
- vsDesk
- CWE-305
- CVSS 8.8 High
Use of user input in raw SQL queries in vsDesk leading to blind SQL injection
- vsDesk