CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

668 matches found

NVD•added 2025/11/04 10:16 p.m.•9 views

CVE-2025-62520

Mantis Bug Tracker MantisBT is an open source issue tracker. In versions 2.27.1 and below, due to insufficient access-level checks, any non-admin user with access to manageconfigcolumnspage.php can use the Copy From action to retrieve the columns configuration from a private project they have no...

5.3CVSS0.00241EPSS

Exploits1References3

Vulnrichment•added 2025/11/04 9:31 p.m.•4 views

CVE-2025-62520 MantisBT unauthorized disclosure of private project column configuration

5.3CVSS6.3AI score0.00241EPSS

Exploits1References3

Snyk•added 2025/11/03 8:13 p.m.•2 views

Improper Authorization

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Improper Authorization due to insufficient access-level checks in the manageconfigcolumnspage.php. An attacker can retrieve configuration details from private projects by using the 'Copy From'...

5.3CVSS6.9AI score0.00241EPSS

Exploits1References2

Positive Technologies•added 2025/11/03 12:0 a.m.•5 views

PT-2025-44805

Name of the Vulnerable Software and Affected Versions MantisBT versions 2.27.1 and below Description Mantis Bug Tracker MantisBT is an open source issue tracker. Insufficient access-level checks allow a non-admin user with access to the manage config columns page.php page to retrieve the columns...

5.3CVSS6.7AI score0.00241EPSS

Exploits1References8

Tenable Nessus•added 2025/10/24 12:0 a.m.•4 views

EulerOS 2.0 SP13 : sqlite (EulerOS-SA-2025-2278)

According to the versions of the sqlite package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. Thi...

7.7CVSS7.1AI score0.73495EPSS

Exploits3References2