Lucene search
+L

607 matches found

OSV
OSV
added 2025/05/05 12:15 p.m.18 views

CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

6.7AI score
SaveExploits0References3
OSV
OSV
added 2025/05/05 12:15 p.m.4 views

DEBIAN-CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

2.3CVSS5.2AI score0.0016EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/05 12:15 p.m.38 views

UBUNTU-CVE-2025-2545

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

2.3CVSS5.8AI score0.0016EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/05 11:28 a.m.19 views

CVE-2025-2545 Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

2.3CVSS5.9AI score0.0016EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/05 11:28 a.m.53 views

CVE-2025-2545 Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES 3DES cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could...

2.3CVSS0.0016EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/05 11:28 a.m.95 views

CVE-2025-2545

CVE-2025-2545 affects Best Practical Solutions, LLC’s Request Tracker prior to v5.0.8. The issue arises from using the Triple DES (3DES) cryptographic algorithm to protect emails sent with S/MIME, which is considered obsolete and insecure. The documented impact on confidentiality is described as ...

2.3CVSS5.9AI score0.0016EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.6 views

Best Practical Solutions Request Tracker 加密问题漏洞

Best Practical Solutions Request Tracker is an open source, enterprise-grade work order tracking system for customer service, IT service management and business process tracking from Best Practical Solutions. An encryption issue vulnerability exists in Best Practical Solutions Request Tracker...

2.3CVSS6.5AI score0.0016EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2025/05/01 12:0 a.m.10 views

Debian: Security Advisory (DSA-5909-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS6.3AI score0.00285EPSS
SaveExploits0References2
Debian
Debian
added 2025/04/30 9:41 p.m.90 views

[SECURITY] [DSA 5911-1] request-tracker4 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5911-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq -...

7.2CVSS6AI score0.00285EPSS
SaveExploits0
Debian
Debian
added 2025/04/30 9:26 p.m.114 views

[SECURITY] [DSA 5909-1] request-tracker5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5909-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq -...

7.2CVSS6AI score0.00285EPSS
SaveExploits0
Debian
Debian
added 2025/04/30 9:25 p.m.92 views

[SECURITY] [DSA 5909-1] request-tracker5 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5909-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso April 30, 2025 https://www.debian.org/security/faq -...

7.2CVSS6AI score0.00285EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/04/30 12:0 a.m.18 views

Debian dsa-5909 : request-tracker5 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5909 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5909-1 [email protected] https://www.debian.org/securit...

7.2CVSS5.3AI score0.00285EPSS
SaveExploits0References12
OSV
OSV
added 2025/04/30 12:0 a.m.11 views

DSA-5909-1 request-tracker5 - security update

Bulletin has no description...

7.2CVSS6.7AI score0.00285EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/04/30 12:0 a.m.11 views

Debian dsa-5911 : request-tracker4 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5911 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5911-1 [email protected] https://www.debian.org/securit...

7.2CVSS5.3AI score0.00285EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
added 2025/04/20 11:26 p.m.2 views

SUSE CVE-2016-6127

Cross-site scripting XSS vulnerability in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2, when the AlwaysDownloadAttachments config setting is not in use, allows remote attackers to inject arbitrary web script or HTML via a file upload with an unspecified conten...

6.1CVSS7.9AI score0.01199EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/09/25 2:15 p.m.14 views

CVE-2024-45613

CKEditor 5 is a JavaScript rich-text editor. Starting in version 40.0.0 and prior to version 43.1.1, a Cross-Site Scripting XSS vulnerability is present in the CKEditor 5 clipboard package. This vulnerability could be triggered by a specific user action, leading to unauthorized JavaScript code...

6.1CVSS7.1AI score0.00478EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/07/04 12:0 a.m.11 views

FreeBSD : Request Tracker -- information exposure vulnerability (51498ee4-39a1-11ef-b609-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 51498ee4-39a1-11ef-b609-002590c1f29c advisory. Request Tracker reports: CVE-2024-3262 describes previously viewed pages being stored in the browser...

5.5CVSS5.5AI score0.00285EPSS
SaveExploits0References3
OSV
OSV
added 2024/04/04 10:15 a.m.4 views

UBUNTU-CVE-2024-3262

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser...

5.5CVSS5.8AI score0.00285EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/04/04 9:21 a.m.12 views

CVE-2024-3262 Information exposure vulnerability in Request Tracker (RT)

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser...

5.5CVSS6.1AI score0.00285EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/04 9:21 a.m.22 views

CVE-2024-3262 Information exposure vulnerability in Request Tracker (RT)

Information exposure vulnerability in RT software affecting version 4.4.1. This vulnerability allows an attacker with local access to the device to retrieve sensitive information about the application, such as vulnerability tickets, because the application stores the information in the browser...

5.5CVSS5.4AI score0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder