Lucene search
+L

5743 matches found

osv_debian
osv_debian
•added 2022/07/14 12:15 p.m.•24 views

DEBIAN-CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.1CVSS6.1AI score0.0056EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2022/07/14 12:15 p.m.•23 views

UBUNTU-CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.1CVSS6.4AI score0.0056EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/07/14 12:15 p.m.•76 views

CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.1CVSS6.3AI score0.0056EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/14 12:15 p.m.•26 views

Open redirect

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

5.8CVSS6.2AI score0.0056EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2022/07/14 11:51 a.m.•16 views

CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.8AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2022/07/14 11:51 a.m.•33 views

CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.5AI score0.0056EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/07/14 11:51 a.m.•64 views

CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.1CVSS6.2AI score0.0056EPSS
SaveExploits0
Mend
Mend
•added 2022/07/14 11:51 a.m.•23 views

CVE-2022-25803

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.1CVSS0.0056EPSS
SaveExploits0References5
CVE
CVE
•added 2022/07/14 11:51 a.m.•122 views

CVE-2022-25803

The CVE-2022-25803 entry concerns Best Practical Request Tracker (RT) before 5.0.3, which is vulnerable to an Open Redirect via a ticket search. Public references note the issue as part of RT’s release notes for 5.0.3, indicating an in-product redirect vulnerability rather than a broader exploita...

6.1CVSS6.2AI score0.0056EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/07/14 12:00 a.m.•29 views

Best Practical Request Tracker: Input validation error vulnerability

Best Practical Request Tracker is an event tracking system written in Perl. An input validation error vulnerability exists in versions of Best Practical Request Tracker RT prior to 5.0.3, which stems from having an open redirection via ticket search...

6.1CVSS6.2AI score0.0056EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•5 views

CVE-2022-25803: URL Redirection to Untrusted Site

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

6.1CVSS6.3AI score0.0056EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/07/14 12:00 a.m.•5 views

PT-2022-17529 · Best Practical · Request Tracker

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions prior to 5.0.3 Description: The issue is an Open Redirect that occurs via a ticket search. This means that an attacker could potentially redirect users to unintended locations, which could lead to...

7.5CVSS7AI score0.01835EPSS
SaveExploits0References22
osv_cve
osv_cve
•added 2022/07/12 10:15 p.m.•16 views

CVE-2022-35403

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

7.5CVSS5.8AI score0.06205EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/12 10:15 p.m.•12 views

CVE-2022-35403

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

7.5CVSS7.1AI score0.06205EPSS
SaveExploits0References2
Prion
Prion
•added 2022/07/12 10:15 p.m.•31 views

Arbitrary file deletion

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

5CVSS7.4AI score0.06205EPSS
SaveExploits0References1Affected Software4
Positive Technologies
Positive Technologies
•added 2022/07/12 12:00 a.m.•4 views

PT-2022-22805

Name of the Vulnerable Software and Affected Versions ServiceDesk Plus versions prior to 13008 ServiceDesk Plus MSP versions prior to 10606 SupportCenter Plus versions prior to 11022 Asset Explorer versions prior to 6977 Description The issue is related to an unauthenticated local file disclosure...

7.5CVSS0.06205EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•28 views

ZOHO ManageEngine ServiceDesk Plus security vulnerabilities

ZOHO ManageEngine ServiceDesk Plus SDP is the United States ZhuoHao ZOHO company's set of ITIL-based architecture of IT service management software. The software integrates Incident Management, Problem Management, Asset Management, IT Project Management, Procurement and Contract Management, and...

7.5CVSS7.3AI score0.06205EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/12 12:00 a.m.•7 views

CVE-2022-35403: Undefined Security Weakness

Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk Plus MSP before 10606, and SupportCenter Plus before 11022 are affected by an unauthenticated local file disclosure vulnerability via ticket-creation email. This also affects Asset Explorer before 6977 with authentication...

7.5CVSS7.3AI score0.06205EPSS
SaveExploits0References1
Atlassian
Atlassian
•added 2022/07/07 7:05 p.m.•71 views

Confluence Apache Tomcat CVE-2022-34305

This is reproducible on Data Center: yes The current version of Tomcat 9.0.63 is bundled with Confluence 7.18.2 and Confluence 7.13.8 are vulnerable to CVE-2022-34305 https://vulners.com/cve/CVE-2022-34305 h3. Steps to Reproduce - h3. Expected Results - h3. Actual Results - h3. Workaround Manuall...

6.1CVSS6.3AI score0.06714EPSS
SaveExploits1
Nextcloud
Nextcloud
•added 2022/07/06 5:18 p.m.•66 views

Ownership check missing when updating or deleting mail attachments

None...

5.4CVSS4.8AI score0.00779EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder