Debian dla-3642 : request-tracker4 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3642 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3642-1 [email protected]...

[SECURITY] [DSA 5542-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5542-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2023 https://www.debian.org/security/faq -...

[SECURITY] [DSA 5541-1] request-tracker5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5541-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 30, 2023 https://www.debian.org/security/faq -...

FreeBSD : Request Tracker -- multiple vulnerabilities (e14b9870-62a4-11ee-897b-000bab9f87f1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e14b9870-62a4-11ee-897b-000bab9f87f1 advisory. - Request Tracker reports: CVE-2023-41259 SECURITY: RT is vulnerable to unvalidated email...

CVE-2022-41260

creationtimestamp| type| source ---|---|--- 2022-11-09 00:41:51+00:00| seen| https://t.me/cibsecurity/52693 2025-04-30 18:14:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14105...

CVE-2022-41260

CVE-2022-41260 affects SAP Financial Consolidation version 1010. The vulnerability arises from insufficient encoding of user-controlled input, enabling an unauthenticated attacker to inject a web script via a GET request. Successful exploitation could lead to viewing or modifying information, wit...

CVE-2022-41260

SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality a...

CVE-2021-41260

Galette is a membership management web application built for non profit organizations and released under GPLv3. Versions prior to 0.9.6 do not check for Cross Site Request Forgery attacks. All users are advised to upgrade to 0.9.6 as soon as possible. There are no known workarounds for this issue...

CVE-2021-41260

CVE-2021-41260 affects Galette, a PHP-based membership management app. The issue is missing Cross-Site Request Forgery (CSRF) protections in versions prior to 0.9.6. Public disclosures from multiple sources (NVD, Red Hat, Ubuntu, CNVD, OSV) all state no CSRF checks exist before 0.9.6 and recommen...