Lucene search
+L

863 matches found

OSV
OSV
added 2019/11/26 12:49 a.m.7 views

USN-4200-1 redmine vulnerabilities

It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. CVE-2019-17427 It was discovered that an SQL injection could allow users to access protected information via a crafted obje...

6.5CVSS6.7AI score0.04338EPSS
SaveExploits2References3
Ubuntu
Ubuntu
added 2019/11/26 12:49 a.m.87 views

USN-4200-1: Redmine vulnerabilities

It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use this issue to cause a XSS attack. CVE-2019-17427 It was discovered that an SQL injection could allow users to access protected information via a crafted obje...

6.5CVSS6.6AI score0.04338EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2019/11/26 12:00 a.m.34 views

Ubuntu 16.04 LTS / 18.04 LTS : Redmine vulnerabilities (USN-4200-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4200-1 advisory. It was discovered that Redmine incorrectly handle certain inputs that could cause textile formatting errors. An attacker could possibly use...

6.5CVSS6.7AI score0.04338EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2019/11/26 12:00 a.m.28 views

Ubuntu: Security Advisory (USN-4200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.04338EPSS
SaveExploits2References2
OSV
OSV
added 2019/11/21 6:15 p.m.16 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.5AI score
SaveExploits0References6
NVD
NVD
added 2019/11/21 6:15 p.m.22 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.5AI score0.04338EPSS
SaveExploits2References6
OSV
OSV
added 2019/11/21 6:15 p.m.9 views

DEBIAN-CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.7AI score0.04338EPSS
SaveExploits2References1
Prion
Prion
added 2019/11/21 6:15 p.m.14 views

Sql injection

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

4CVSS6.4AI score0.04338EPSS
SaveExploits2References6Affected Software2
UbuntuCve
UbuntuCve
added 2019/11/21 6:15 p.m.23 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.7AI score0.04338EPSS
SaveExploits2References5
OSV
OSV
added 2019/11/21 6:15 p.m.6 views

UBUNTU-CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.7AI score0.04338EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2019/11/21 5:46 p.m.25 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.4AI score0.04338EPSS
SaveExploits2References6
CVE
CVE
added 2019/11/21 5:46 p.m.152 views

CVE-2019-18890

CVE-2019-18890 describes a SQL injection in Redmine up to versions 3.2.9 and 3.3.x before 3.3.10, allowing Redmine users to access protected information via a crafted object query. The vulnerability is caused by improper handling of input in the object query path, enabling arbitrary SQL execution...

6.5CVSS6.3AI score0.04338EPSS
SaveExploits2References6Affected Software1
Debian CVE
Debian CVE
added 2019/11/21 5:46 p.m.42 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.5AI score0.04338EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2019/11/20 12:00 a.m.34 views

Debian DSA-4574-1 : redmine - security update

Holger Just discovered a SQL injection in Redmine, a project management web application. In addition a cross-site scripting issue was found in Textile formatting. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

6.5CVSS6.2AI score0.04338EPSS
SaveExploits2References5
OpenVAS
OpenVAS
added 2019/11/20 12:00 a.m.54 views

Debian: Security Advisory (DSA-4574-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.3AI score0.04338EPSS
SaveExploits2References4
CNVD
CNVD
added 2019/11/20 12:00 a.m.48 views

Redmine SQL Injection Vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . A SQL injection vulnerability exists in Redmine. The vulnerability stems from a lack of validation o...

6.5CVSS8.2AI score0.04338EPSS
SaveExploits2References1
Debian
Debian
added 2019/11/19 7:03 p.m.71 views

[SECURITY] [DSA 4574-1] redmine security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4574-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 19, 2019 https://www.debian.org/security/faq -...

6.5CVSS7AI score0.04338EPSS
SaveExploits2
OSV
OSV
added 2019/11/19 12:00 a.m.14 views

DSA-4574-1 redmine - security update

Bulletin has no description...

6.5CVSS6.1AI score0.04338EPSS
SaveExploits2
Openbugbounty
Openbugbounty
added 2019/10/11 6:49 p.m.5 views

redmine.dsi.uvsq.fr Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-991551 Security Researcher KhanJanny Helped patch 3053 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting redmine.dsi.uvsq.fr websi...

SaveExploits0
OSV
OSV
added 2019/10/10 2:05 a.m.26 views

CVE-2019-17427

In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent XSS exists due to textile formatting errors...

6.1CVSS6.2AI score
SaveExploits0References5
Rows per page
Query Builder