Lucene search
+L

5181 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/01 12:00 a.m.•10 views

CVE-2025-31848: Missing Authorization

Missing Authorization vulnerability in WPFactory Adverts adverts-click-tracker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Adverts: from n/a through = 1.4...

5.3CVSS5.9AI score0.00446EPSS
SaveExploits0References1
Mend
Mend
•added 2025/03/31 3:40 p.m.•10 views

CVE-2025-29929

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This...

5.1CVSS0.00196EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/03/31 3:40 p.m.•43 views

CVE-2025-29929 Tuleap is missing CSRF protection on tracker hierarchy administration

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This...

4.6CVSS0.00196EPSS
SaveExploits0References4
CVE
CVE
•added 2025/03/31 3:40 p.m.•85 views

CVE-2025-29929

CVE-2025-29929 : Tuleap is affected by a cross-site request forgery (CSRF) vulnerability in tracker hierarchy administration. The issue allows an attacker to trick victims into submitting or editing artifacts or follow-up comments. The vulnerability is fixed in Tuleap Community Edition 16.5.99.17...

4.6CVSS4.7AI score0.00196EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/31 3:40 p.m.•16 views

CVE-2025-29929 Tuleap is missing CSRF protection on tracker hierarchy administration

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This...

4.6CVSS4.7AI score0.00196EPSS
SaveExploits0References4
Mend
Mend
•added 2025/03/31 3:38 p.m.•7 views

CVE-2025-29766

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up...

5.1CVSS0.002EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•38 views

PT-2025-13787 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.5.99.1742306712 Tuleap Enterprise Edition versions prior to 16.5-5 and 16.4-8 Description: The issue is related to the lack of CSRF protection on tracker hierarchy administration. An attacker could exploit this to...

4.6CVSS6.4AI score0.00196EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•19 views

Tuleap security vulnerabilities

Tuleap is an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. A security vulnerability exists in Tuleap Community Edition prior to 16.5.99.1742392651 and Tuleap Enterprise Edition prior to 16.5-5, and prior to 16.4-8, which...

4.3CVSS6.6AI score0.00327EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/31 12:00 a.m.•21 views

PT-2025-13786 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.5.99.1741784483 Tuleap Enterprise Edition versions prior to 16.5-3 and 16.4-8 Description: The issue is related to missing CSRF protections on artifact submission and edition from the tracker view. An attacker coul...

4.6CVSS7.1AI score0.002EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•24 views

Enalean Tuleap Cross-Site Request Forgery Vulnerability

Enalean Tuleap is a free and open source tool from the French company Enalean. It is used for end-to-end traceability of application and system development. Enalean Tuleap suffers from a cross-site request forgery vulnerability that stems from missing CSRF protection in the tracker hierarchy...

4.6CVSS6.6AI score0.00196EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•20 views

Tuleap Cross-Site Request Forgery Vulnerability

Tuleap is an open source suite from Enalean Open Source designed to improve the management of software development and collaboration. Tuleap suffers from a cross-site request forgery vulnerability that stems from missing CSRF protection in the tracker view, which could lead to a victim submitting...

4.6CVSS6.6AI score0.002EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•8 views

CVE-2025-29766: Cross-Site Request Forgery (CSRF)

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap has missing CSRF protections on artifact submission & edition from the tracker view. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up...

4.6CVSS5.9AI score0.002EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•10 views

CVE-2025-29929: Cross-Site Request Forgery (CSRF)

Tuleap is an Open Source Suite to improve management of software developments and collaboration. Tuleap is missing CSRF protection on tracker hierarchy administration. An attacker could use this vulnerability to trick victims into submitting or editing artifacts or follow-up comments. This...

4.6CVSS5.8AI score0.00196EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/03/27 3:15 p.m.•40 views

AZL-62830 CVE-2025-21884 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: net: better track kernel sockets lifetime While kernel sockets are dismantled during pernetoperations-exit, their freeing can be delayed by any tx packets still held in qdisc or device queues, due to skbsetownerw prior calls. Thi...

7.8CVSS5.6AI score0.00217EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/26 2:24 p.m.•21 views

CVE-2025-30583

Cross-Site Request Forgery CSRF vulnerability in ProRankTracker Pro Rank Tracker proranktracker allows Stored XSS.This issue affects Pro Rank Tracker: from n/a through = 1.0.0...

7.1CVSS7.2AI score0.00182EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/24 2:15 p.m.•18 views

CVE-2025-30583

Cross-Site Request Forgery CSRF vulnerability in ProRankTracker Pro Rank Tracker proranktracker allows Stored XSS.This issue affects Pro Rank Tracker: from n/a through = 1.0.0...

7.1CVSS0.00182EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/24 1:47 p.m.•45 views

CVE-2025-30583 WordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ProRankTracker Pro Rank Tracker proranktracker allows Stored XSS.This issue affects Pro Rank Tracker: from n/a through = 1.0.0...

7.1CVSS0.00182EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/24 1:47 p.m.•13 views

CVE-2025-30583 WordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ProRankTracker Pro Rank Tracker proranktracker allows Stored XSS.This issue affects Pro Rank Tracker: from n/a through = 1.0.0...

7.1CVSS7.3AI score0.00182EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/24 1:47 p.m.•79 views

CVE-2025-30583

CVE-2025-30583 describes a Cross-Site Request Forgery (CSRF) that leads to Stored Cross-Site Scripting (XSS) in Pro Rank Tracker. Public detail shows affected software: Pro Rank Tracker (Pro Rank Tracker) with the issue affecting versions up to 1.0.0. The Connected document set explicitly lists t...

7.1CVSS7.2AI score0.00182EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/03/24 1:32 p.m.•17 views

WordPress Pro Rank Tracker plugin <= 1.0.0 - CSRF to Stored XSS Vulnerability

CSRF to Stored XSS Vulnerability discovered by Abdi Pranata in WordPress Plugin Pro Rank Tracker versions = 1.0.0...

7.1CVSS6.1AI score0.00182EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder