CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Mend•added 2018/02/02 9:00 a.m.•4 views

CVE-2018-6526

viewallbugpage.php in MantisBT 2.10.0-development before 2018-02-02 allows remote attackers to discover the full path via an invalid filter parameter, related to a filterensurevalidfilter call in currentuserapi.php...

6.9CVSS0.03966EPSS

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2018/02/02 12:00 a.m.•6 views

CVE-2018-6526: Exposure of Sensitive Information to an Unauthorized Actor

5.3CVSS6.1AI score0.03966EPSS

SaveExploits0References2

Prion•added 2014/12/08 4:59 p.m.•28 views

Null pointer dereference

The currentusergetbugfilter function in core/currentuserapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary PHP code via the filter parameter...

7.5CVSS7.9AI score0.03145EPSS

SaveExploits1References8Affected Software1

Mend•added 2014/12/08 4:00 p.m.•5 views

CVE-2014-9280

The currentusergetbugfilter function in core/currentuserapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary PHP code via the filter parameter...

7.5CVSS0.03145EPSS

SaveExploits1References8

Rapid7 Vulnerability Database (full)•added 2014/12/08 12:00 a.m.•5 views

CVE-2014-9280: Improper Control of Generation of Code

The currentusergetbugfilter function in core/currentuserapi.php in MantisBT before 1.2.18 allows remote attackers to execute arbitrary PHP code via the filter parameter...

7.5CVSS6.4AI score0.03145EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by