Lucene search
K

29 matches found

EUVD
EUVD
added 2025/11/10 4:5 a.m.0 views

EUVD-2025-41260

Malicious code in dewi-gulai93-ruro npm...

6.6AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-41260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 do not check for Cross...

8.8CVSS7.8AI score0.00158EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 4:16 a.m.6 views

CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

7.5CVSS6.7AI score0.00161EPSS
Exploits0
Circl
Circl
added 2024/08/01 6:46 p.m.1 views

CVE-2024-41260

creationtimestamp| type| source ---|---|--- 2024-08-01 18:46:16+00:00| seen| https://t.me/cvedetector/2249...

7.5CVSS7.8AI score0.00115EPSS
Exploits0References1
OSV
OSV
added 2024/08/01 4:15 p.m.2 views

CVE-2024-41260

A static initialization vector IV in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information email addresses when in possession of the audit events database...

7.5CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2024/08/01 4:15 p.m.12 views

CVE-2024-41260

A static initialization vector IV in the encrypt function of netbird management's service from v0.23.2 to v0.29.1 allows attackers to obtain sensitive information email addresses when in possession of the audit events database...

7.5CVSS0.00115EPSS
Exploits0References3
CVE
CVE
added 2024/08/01 12:0 a.m.59 views

CVE-2024-41260

CVE-2024-41260 : NetBird’s netbird management service (versions 0.23.2–0.29.1) uses a static initialization vector (IV) in the encrypt function, enabling an attacker with access to the audit events database to obtain sensitive information (email addresses). Root cause: static IV in the encryption...

7.5CVSS5.9AI score0.00115EPSS
Exploits0References3
Ubuntu
Ubuntu
added 2023/12/04 6:7 p.m.849 views

USN-6529-1: Request Tracker vulnerabilities

It was discovered that Request Tracker incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to obtain sensitive information. CVE-2021-38562, CVE-2022-25802, CVE-2023-41259,...

7.5CVSS6.9AI score0.0106EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/12/04 12:0 a.m.41 views

Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Request Tracker vulnerabilities (USN-6529-1)

The remote Ubuntu 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6529-1 advisory. It was discovered that Request Tracker incorrectly handled certain inputs. If a user or an automated system were...

7.5CVSS6.9AI score0.0106EPSS
Exploits0References5
OSV
OSV
added 2023/11/03 5:15 a.m.4 views

CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

7.5CVSS7.4AI score
Exploits0References4
NVD
NVD
added 2023/11/03 5:15 a.m.21 views

CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

7.5CVSS7.3AI score0.00161EPSS
Exploits0References4
OSV
OSV
added 2023/11/03 5:15 a.m.0 views

UBUNTU-CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

7.5CVSS7.1AI score0.00161EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2023/11/03 12:0 a.m.15 views

CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

7.1AI score0.00161EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2023/11/03 12:0 a.m.46 views

CVE-2023-41260

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...

7.5CVSS7.4AI score0.00161EPSS
Exploits0
CVE
CVE
added 2023/11/03 12:0 a.m.121 views

CVE-2023-41260

CVE-2023-41260 affects Best Practical Request Tracker (RT) prior to 4.4.7 and RT 5.x prior to 5.0.5, enabling information exposure in responses to mail-gateway REST API calls. Public references indicate fixes in RT 4.4.7 and RT 5.0.5, with Debian LTS patching RT 4.4.3-2+deb10u3. No exploitation d...

7.5CVSS7.2AI score0.00161EPSS
Exploits0References4Affected Software1
OpenVAS
OpenVAS
added 2023/11/01 12:0 a.m.17 views

Debian: Security Advisory (DLA-3642-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.00161EPSS
Exploits0References4
Debian
Debian
added 2023/10/31 4:53 a.m.18 views

[SECURITY] [DLA 3642-1] request-tracker4 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3642-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso October 31, 2023 https://wiki.debian.org/LTS -...

7.5CVSS8.1AI score0.00161EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/10/31 12:0 a.m.15 views

Debian: Security Advisory (DSA-5541-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.00224EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2023/10/31 12:0 a.m.32 views

Debian DSA-5542-1 : request-tracker4 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5542 advisory. - Request Tracker reports: CVE-2023-41259 SECURITY: RT is vulnerable to unvalidated email headers in incoming email and the mail-gateway REST interface...

7.5CVSS7.3AI score0.00224EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2023/10/31 12:0 a.m.27 views

Debian dla-3642 : request-tracker4 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3642 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3642-1 [email protected]...

7.5CVSS7.3AI score0.00161EPSS
Exploits0References6
Rows per page
Query Builder