5762 matches found
CVE-2023-41348: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt th...
CVE-2023-45024: Exposure of Sensitive Information to an Unauthorized Actor
Best Practical Request Tracker RT 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder...
Critical Photon OS Security Update - PHSA-2023-5.0-0135
Updates of 'linux', 'traceroute', 'linux-secure', 'linux-esx', 'linux-rt', 'coredns' packages of Photon OS have been released...
Fedora: Security Advisory for rt (FEDORA-2023-a2df0551fe)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-45024
CVE-2023-45024 affects Best Practical Request Tracker (RT) 5.x, with information disclosure via a transaction search in the transaction query builder. The vulnerability is associated with RT versions before 5.0.5, as cited in multiple sources (NVD entry for CVE-2023-45024 and related advisories)....
CVE-2023-41347: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system...
CVE-2023-41346: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the syst...
CVE-2023-41345: Improper Neutralization of Special Elements used in an OS Command
ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the...
CVE-2023-41260
CVE-2023-41260 affects Best Practical Request Tracker (RT) prior to 4.4.7 and RT 5.x prior to 5.0.5, enabling information exposure in responses to mail-gateway REST API calls. Public references indicate fixes in RT 4.4.7 and RT 5.0.5, with Debian LTS patching RT 4.4.3-2+deb10u3. No exploitation d...
CVE-2023-41260: Exposure of Sensitive Information to an Unauthorized Actor
Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls...
Information Disclosure
request-tracker4 is vulnerable to Information Disclosure. The vulnerability occurs due to request tracker accepting unvalidated RT email headers in incoming emails, resulting in disclosure of confidential information...
[SECURITY] Fedora 37 Update: rt-5.0.5-1.fc37
RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitted by a community of users...
PT-2023-7408
Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The authentication-related function in the affected devices has a vulnerability due to insufficient filtering of special characters within i...
PT-2023-7411
Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The authentication-related function in the ASUS RT-AX55 and RT-AC86U routers has a vulnerability due to insufficient filtering of special...
PT-2023-7410
Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The authentication-related function in ASUS routers has a flaw due to inadequate filtering of special characters within the token-generated...
PT-2023-7409
Name of the Vulnerable Software and Affected Versions ASUS RT-AX55 affected versions not specified ASUS RT-AC86U affected versions not specified Description The vulnerability exists in the authentication-related function of the router's software due to insufficient filtering of special characters...
Fedora: Security Advisory for rt (FEDORA-2023-64fe19f832)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important Photon OS Security Update - PHSA-2023-5.0-0130
Updates of 'linux', 'linux-secure', 'grub2', 'linux-esx', 'linux-rt' packages of Photon OS have been released...
Fedora 38 : rt (2023-64fe19f832)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-64fe19f832 advisory. Upstream security and bugfix update. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...