Lucene search
+L

695 matches found

Positive Technologies
Positive Technologies
•added 2021/10/18 12:00 a.m.•11 views

PT-2021-22211 · Best Practical +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 4.2 through 4.2.16 Best Practical Request Tracker RT versions 4.4 through 4.4.4 Best Practical Request Tracker RT versions 5.0 through 5.0.1 Description: The issue allows sensitive information...

7.5CVSS6.5AI score0.01835EPSS
SaveExploits0References40
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•40 views

Best Practical Request Tracker 信息泄露漏洞

Best Practical Request Tracker is an event tracking system written in Perl. An information disclosure vulnerability exists in Best Practical Request Tracker because the product does not securely manage the lib/RT/REST2/Middleware/Auth.pm file. An attacker can cause sensitive information to be...

7.5CVSS7.2AI score0.01835EPSS
SaveExploits0References9
Symantec
Symantec
•added 2020/01/14 12:00 a.m.•50 views

Oracle Hospitality Suites Management CVE-2020-2697 Local Security Vulnerability

Description Oracle Hospitality Suites Management is prone to a local security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Request Tracker' package is affected. This vulnerability affects the following supported versions: 3.7, 3.8 Technologies Affected Oracle...

1.3AI score0.00381EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2019/03/21 4:00 p.m.•10 views

ALPINE-CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS6.8AI score0.02356EPSS
SaveExploits0References1
NVD
NVD
•added 2019/03/21 4:00 p.m.•21 views

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS7.4AI score0.02356EPSS
SaveExploits0References5
OSV
OSV
•added 2019/03/21 4:00 p.m.•31 views

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS5.8AI score
SaveExploits0References5
OSV
OSV
•added 2019/03/21 4:00 p.m.•9 views

DEBIAN-CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS6.8AI score0.02356EPSS
SaveExploits0References1
OSV
OSV
•added 2019/03/21 4:00 p.m.•12 views

UBUNTU-CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS7.1AI score0.02356EPSS
SaveExploits0References6
Mend
Mend
•added 2019/03/17 9:16 p.m.•1 views

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

8.7CVSS0.02356EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2019/03/17 9:16 p.m.•42 views

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.3AI score0.02356EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2019/03/17 9:16 p.m.•54 views

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS7.4AI score0.02356EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2019/03/17 9:16 p.m.•63 views

CVE-2018-18898

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS7.4AI score0.02356EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2019/03/17 12:00 a.m.•9 views

PT-2019-9665 · Best Practical +1 · Request Tracker +1

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker versions 4.1.13 through 4.4 Description: The issue concerns the email-ingestion feature, which is susceptible to a denial of service by remote attackers. This is achieved through an algorithmic complexity attack...

7.5CVSS7.3AI score0.02356EPSS
SaveExploits0References23
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/17 12:00 a.m.•6 views

CVE-2018-18898: Uncontrolled Resource Consumption

The email-ingestion feature in Best Practical Request Tracker 4.1.13 through 4.4 allows denial of service by remote attackers via an algorithmic complexity attack on email address parsing...

7.5CVSS5.8AI score0.02356EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/07/18 12:00 a.m.•63 views

Request Tracker (RT) 4.x < 4.0.25, 4.2.x < 4.2.14, 4.4.x < 4.4.2 Multiple Vulnerabilities

Request Tracker RT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.3AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2017/07/18 12:00 a.m.•35 views

Request Tracker (RT) 4.x < 4.2.12 Multiple XSS Vulnerabilities

Request Tracker RT is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.3CVSS9.2AI score0.02075EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/07/05 12:00 a.m.•19 views

Best Practical Solutions Request Tracker Information Disclosure Vulnerability

Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A security vulnerability exists in Best Practical...

5.9CVSS6.6AI score0.01368EPSS
SaveExploits0References1
CNVD
CNVD
•added 2017/07/05 12:00 a.m.•38 views

Request Tracker Cross-Site Scripting Vulnerability (CNVD-2017-21554)

Best Practical Solutions Request Tracker RT is an enterprise-grade, open source issue tracking system from Best Practical Solutions in the United States. The system has Bug tracking , customer service , customized workflow and other features . A cross-site scripting vulnerability exists in Best...

6.1CVSS6.3AI score0.01199EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2017/07/03 4:29 p.m.•33 views

CVE-2016-6127

Cross-site scripting XSS vulnerability in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2, when the AlwaysDownloadAttachments config setting is not in use, allows remote attackers to inject arbitrary web script or HTML via a file upload with an unspecified conten...

6.1CVSS7AI score0.01199EPSS
SaveExploits0References1
Prion
Prion
•added 2017/07/03 4:29 p.m.•22 views

Design/Logic Flaw

The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name...

6.5CVSS8.6AI score0.02784EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder