Lucene search
K

7 matches found

OSV
OSV
added 2025/09/24 8:15 p.m.2 views

CVE-2025-57325

rollbar is a package designed to effortlessly track and debug errors in JavaScript applications. This package includes advanced error tracking features and an intuitive interface to help you identify and fix issues more quickly. A Prototype Pollution vulnerability in the utility.set function of...

7.5CVSS6.7AI score0.00145EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/24 12:0 a.m.3 views

PT-2025-39334

Name of the Vulnerable Software and Affected Versions rollbar versions prior to 2.26.4 Description rollbar is a package used for tracking and debugging errors in JavaScript applications. A flaw exists in the utility.set function that allows attackers to inject properties onto Object.prototype by...

7.5CVSS6.3AI score0.00145EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2024/10/03 12:0 a.m.8 views

MantisBT < 2.26.4 Information Disclosure (0034640)

The version of MantisBT installed on the remote host is prior to 2.26.4. It is, therefore, affected by a information disclosure vulnerability as referenced in the 0034640 advisory. - Mantis Bug Tracker MantisBT is an open source issue tracker. Using a crafted POST request, an unprivileged,...

6.5CVSS5.6AI score0.00663EPSS
Exploits0References4
Snyk
Snyk
added 2024/09/30 5:48 p.m.1 views

Insecure Direct Object References

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Insecure Direct Object References due to ‘profileid’ parameter being manipulated to switch to a different post, when attempting to update a profile entry. This allows users to enumerate other...

6.5CVSS6.9AI score0.00663EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/30 12:0 a.m.1 views

PT-2024-31773 · Unknown · Mantis Bug Tracker

Name of the Vulnerable Software and Affected Versions: Mantis Bug Tracker MantisBT versions prior to 2.26.4 Description: The issue allows an unprivileged, registered user to retrieve information about other users' personal system profiles using a crafted POST request. This can lead to the...

6.5CVSS6.8AI score0.00663EPSS
Exploits0References14
OSV
OSV
added 2020/03/02 11:15 p.m.0 views

UBUNTU-CVE-2020-10018

WebKitGTK through 2.26.4 and WPE WebKit through 2.26.4 which are the versions right before 2.28.0 contains a memory corruption issue use-after-free that may lead to arbitrary code execution. This issue has been fixed in 2.28.0 with improved memory handling...

9.8CVSS7AI score0.02644EPSS
Exploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2020/03/02 12:0 a.m.127 views

Security update for webkit2gtk3 (important)

openSUSE Security Update: Security update for webkit2gtk3 Announcement ID: openSUSE-SU-2020:0278-1 Rating: important References: 1159329 1161719 1163809 Cross-References: CVE-2019-8835 CVE-2019-8844 CVE-2019-8846 CVE-2020-3862 CVE-2020-3864 CVE-2020-3865 CVE-2020-3867 CVE-2020-3868 Affected...

9.3CVSS9.1AI score0.02173EPSS
Exploits0References3
Rows per page
Query Builder