5743 matches found
DEBIAN-CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
UBUNTU-CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
Open redirect
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25803
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
CVE-2022-25803
The CVE-2022-25803 entry concerns Best Practical Request Tracker (RT) before 5.0.3, which is vulnerable to an Open Redirect via a ticket search. Public references note the issue as part of RT’s release notes for 5.0.3, indicating an in-product redirect vulnerability rather than a broader exploita...
Best Practical Request Tracker: Input validation error vulnerability
Best Practical Request Tracker is an event tracking system written in Perl. An input validation error vulnerability exists in versions of Best Practical Request Tracker RT prior to 5.0.3, which stems from having an open redirection via ticket search...
CVE-2022-25803: URL Redirection to Untrusted Site
Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...
PT-2022-17529 · Best Practical · Request Tracker
Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions prior to 5.0.3 Description: The issue is an Open Redirect that occurs via a ticket search. This means that an attacker could potentially redirect users to unintended locations, which could lead to...
CVE-2022-35403
Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...
CVE-2022-35403
Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...
Arbitrary file deletion
Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...
PT-2022-22805
Name of the Vulnerable Software and Affected Versions ServiceDesk Plus versions prior to 13008 ServiceDesk Plus MSP versions prior to 10606 SupportCenter Plus versions prior to 11022 Asset Explorer versions prior to 6977 Description The issue is related to an unauthenticated local file disclosure...
ZOHO ManageEngine ServiceDesk Plus security vulnerabilities
ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management, and...
CVE-2022-35403: Undefined Security Weakness
Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...
Confluence Apache Tomcat CVE-2022-34305
This is reproducible on Data Center: yes The current version of Tomcat 9.0.63 is bundled with Confluence 7.18.2 and Confluence 7.13.8 are vulnerable to CVE-2022-34305 https://vulners.com/cve/CVE-2022-34305 h3. Steps to Reproduce - h3. Expected Results - h3. Actual Results - h3. Workaround Manuall...