Login Request a demo
PO
Vendor
polonel
2 products with CVEs on record
30
CVEs
0
On KEV
12
New 30D
Products
TR
trudesk
polonel
7.5
12 CVEs0 on KEV12 new
PO
polonel/trudesk
polonel
9.8
18 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114402
TR
trudesk
polonel
4.3
0%
Oct 21Trudesk through 1.2.11 Path Traversal and Authorization Bypass via Profile Image Upload
CVE-2026-114401
TR
trudesk
polonel
5.3
0%
Oct 21Trudesk through 1.2.11 Username Enumeration via Regex Injection in /api/v1/login
CVE-2026-114400
TR
trudesk
polonel
7.5
1%
Oct 21Trudesk through 1.2.11 Missing Authentication for Ticket Attachments via /uploads
CVE-2026-114399
TR
trudesk
polonel
6.5
1%
Oct 21Trudesk through 1.2.11 Path Traversal via Backup Delete and Restore API
CVE-2026-114398
TR
trudesk
polonel
5.4
0%
Oct 21Trudesk through 1.2.11 Unrestricted File Upload via /settings/general/uploadlogo
CVE-2026-114397
TR
trudesk
polonel
7.4
1%
Oct 21Trudesk through 1.2.11 Missing Authentication on Debug Routes
CVE-2026-114396
TR
trudesk
polonel
7.1
0%
Oct 21Trudesk through 1.2.11 MongoDB $where Injection via tickets search API
CVE-2026-114395
TR
trudesk
polonel
4.3
0%
Oct 21Trudesk through 1.2.11 Authorization Bypass via /api/v1/messages/send
CVE-2026-114394
TR
trudesk
polonel
4.3
0%
Oct 21Trudesk through 1.2.11 Authorization Bypass via Ticket Comment and Create APIs
CVE-2026-114393
TR
trudesk
polonel
4.3
0%
Oct 21Trudesk through 1.2.11 Authorization Bypass via Ticket Update API Endpoints
CVE-2026-114392
TR
trudesk
polonel
5.3
0%
Oct 21Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/tickets/:uid
CVE-2026-111345
TR
trudesk
polonel
4.3
0%
Oct 15Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id
CVE-2022-2128
PO
polonel/trudesk
polonel
9.8
3%
Jun 20Unrestricted Upload of File with Dangerous Type in polonel/trudesk
CVE-2022-2023
PO
polonel/trudesk
polonel
9.8
3%
Jun 20Incorrect Use of Privileged APIs in polonel/trudesk
CVE-2022-1947
PO
polonel/trudesk
polonel
6.5
1%
May 31Use of Incorrect Operator in polonel/trudesk
CVE-2022-1808
PO
polonel/trudesk
polonel
8.8
4%
May 31Execution with Unnecessary Privileges in polonel/trudesk
CVE-2022-1893
PO
polonel/trudesk
polonel
5.3
1%
May 31Improper Removal of Sensitive Information Before Storage or Transfer in polonel/trudesk
CVE-2022-1926
PO
polonel/trudesk
polonel
4.9
1%
May 31Integer Overflow or Wraparound in polonel/trudesk
CVE-2022-1931
PO
polonel/trudesk
polonel
8.1
2%
May 31Incorrect Synchronization in polonel/trudesk
CVE-2022-1752
PO
polonel/trudesk
polonel
8.0
2%
May 21Unrestricted Upload of File with Dangerous Type in polonel/trudesk
CVE-2022-1775
PO
polonel/trudesk
polonel
9.8
2%
May 20Weak Password Requirements in polonel/trudesk
CVE-2022-1803
PO
polonel/trudesk
polonel
6.9
2%
May 20Improper Restriction of Rendered UI Layers or Frames in polonel/trudesk
CVE-2022-1770
PO
polonel/trudesk
polonel
8.8
3%
May 20Improper Privilege Management in polonel/trudesk
CVE-2022-1754
PO
polonel/trudesk
polonel
6.5
1%
May 20Integer Overflow or Wraparound in polonel/trudesk
CVE-2022-1728
PO
polonel/trudesk
polonel
6.5
1%
May 16Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk
CVE-2022-1718
PO
polonel/trudesk
polonel
7.5
1%
May 16The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in polonel/trudesk
CVE-2022-1719
PO
polonel/trudesk
polonel
5.4
1%
May 16Reflected XSS on ticket filter function in polonel/trudesk
CVE-2022-1044
PO
polonel/trudesk
polonel
6.5
1%
May 12Sensitive Data Exposure Due To Insecure Storage Of Profile Image in polonel/trudesk
CVE-2022-1045
PO
polonel/trudesk
polonel
5.4
2%
Apr 11Stored XSS viva .svg file upload in polonel/trudesk
CVE-2022-1290
PO
polonel/trudesk
polonel
5.4
2%
Apr 10Stored XSS in "Name", "Group Name" & "Title" in polonel/trudesk