Lucene search
+L

863 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.13 views

The vulnerability of the server-based Redmine project and task management web application lies in its ability to read data beyond the allowed buffer size limits, allowing an attacker to compromise the integrity of the data.

The vulnerability of the server-based Redmine project and task management web application is related to incorrect data processing during the formatting of tasks. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

5.3CVSS5.9AI score0.00809EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.7 views

The vulnerability of the Redmine project and task management web application, related to the lack of protective measures for the website structure, allows attackers to compromise the integrity of the data.

The vulnerability of web applications for project and task management is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

6.1CVSS6.3AI score0.00696EPSS
SaveExploits0References7Affected Software3
OpenVAS
OpenVAS
added 2021/10/19 12:00 a.m.28 views

Debian: Security Advisory (DLA-2787-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.6AI score0.01165EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/19 12:00 a.m.25 views

Debian DLA-2787-1 : redmine - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2787 advisory. Redmine, a project management web application, may disclose the names of users on activity views due to an insufficient access filter. An attacker may infer information of...

5.3CVSS5.7AI score0.01165EPSS
SaveExploits0References5
Debian
Debian
added 2021/10/18 4:27 p.m.48 views

[SECURITY] [DLA 2787-1] redmine security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2787-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 18, 2021 https://wiki.debian.org/LTS -...

5.3CVSS5AI score0.01165EPSS
SaveExploits0
OSV
OSV
added 2021/10/18 12:00 a.m.18 views

DLA-2787-1 redmine - security update

Bulletin has no description...

5.3CVSS5.1AI score0.01165EPSS
SaveExploits0
CNVD
CNVD
added 2021/10/14 12:00 a.m.71 views

Redmine Information Disclosure Vulnerability (CNVD-2022-10738)

Redmine is an open source web-based project management and defect tracking tool. The product provides project management, issue tracking, and role-based access control, among other features.A security vulnerability exists in Redmine, which stems from a configuration or other error in the operatio...

5.3CVSS1.7AI score0.01165EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/12 7:15 p.m.3 views

DEBIAN-CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS5.6AI score0.01165EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/12 7:15 p.m.31 views

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS0.01165EPSS
SaveExploits0References5
OSV
OSV
added 2021/10/12 7:15 p.m.21 views

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS6.6AI score
SaveExploits0References5
Prion
Prion
added 2021/10/12 7:15 p.m.20 views

Improper access control

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5CVSS5.2AI score0.01165EPSS
SaveExploits0References5Affected Software2
ATTACKERKB
ATTACKERKB
added 2021/10/12 7:15 p.m.5 views

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS5.7AI score0.01165EPSS
SaveExploits0References6
OSV
OSV
added 2021/10/12 7:15 p.m.6 views

UBUNTU-CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS6AI score0.01165EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2021/10/12 7:15 p.m.26 views

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS6.1AI score0.01165EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2021/10/12 6:08 p.m.70 views

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.3CVSS5.1AI score0.01165EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/10/12 6:08 p.m.37 views

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

5.4AI score0.01165EPSS
SaveExploits0References5
CVE
CVE
added 2021/10/12 6:08 p.m.105 views

CVE-2021-42326

CVE-2021-42326 affects Redmine prior to 4.1.5 and 4.2.x prior to 4.2.3, where an insufficient access filter on activity views may disclose usernames. The root cause is inadequate access control in activity views, enabling information disclosure. Affected products are Redmine (project management/w...

5.3CVSS5AI score0.01165EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2021/10/12 12:00 a.m.10 views

Redmine 信息泄露漏洞

Redmine is an open source web-based project management and defect tracking tool. The product provides project management, issue tracking, and role-based access control, among other features.A security vulnerability exists in Redmine, which stems from a configuration or other error in the operatio...

5.3CVSS5.6AI score0.01165EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/08/20 12:00 a.m.17 views

PT-2021-7414 · Redmine · Redmine

Name of the Vulnerable Software and Affected Versions: Redmine versions 4.1.5 and earlier Redmine versions 4.2.x before 4.2.3 Description: The issue is related to an insufficient access filter, which may disclose the names of users on activity views. This allows a remote attacker to access...

5.3CVSS4.9AI score0.01165EPSS
SaveExploits0References25
OSV
OSV
added 2021/08/05 9:15 p.m.16 views

CVE-2021-37156

Redmine 4.2.0 and 4.2.1 allow existing user sessions to continue upon enabling two-factor authentication for the user's account, but the intended behavior is for those sessions to be terminated...

7.5CVSS7.3AI score
SaveExploits0References2
Rows per page
Query Builder