Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bestpractical vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2014-1474
Algorithmic complexity vulnerability in Email::Address::List prior to 0.02, as used in RT 4.2.0 up to and including 4.2.2, allows remote malicious users to cause a denial of service (CPU consumption) via a string without an address.
Email\\ \\ Address\\
Bestpractical Rt 4.2.1
Bestpractical Rt 4.2.0
Bestpractical Rt 4.2.2
NA
CVE-2023-41259
Best Practical Request Tracker (RT) prior to 4.4.7 and 5.x prior to 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.
Bestpractical Request Tracker
NA
CVE-2023-41260
Best Practical Request Tracker (RT) prior to 4.4.7 and 5.x prior to 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.
Bestpractical Request Tracker
4.3
CVSSv2
CVE-2015-5475
Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x prior to 4.2.12 allow remote malicious users to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
Bestpractical Request Tracker
4.3
CVSSv2
CVE-2015-6506
Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT) prior to 4.2.12 allows remote malicious users to inject arbitrary web script or HTML via a crafted public key.
Bestpractical Request Tracker
NA
CVE-2022-25802
Best Practical Request Tracker (RT) prior to 4.4.6 and 5.x prior to 5.0.3 allows XSS via a crafted content type for an attachment.
Bestpractical Request Tracker
NA
CVE-2022-25803
Best Practical Request Tracker (RT) prior to 5.0.3 has an Open Redirect via a ticket search.
Bestpractical Request Tracker
NA
CVE-2023-45024
Best Practical Request Tracker (RT) 5 prior to 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
Bestpractical Request Tracker
NA
CVE-2022-25800
Best Practical RT for Incident Response (RTIR) prior to 4.0.3 and 5.x prior to 5.0.3 allows SSRF via the whois lookup tool.
Bestpractical Request Tracker For Incident Response
NA
CVE-2022-25801
Best Practical RT for Incident Response (RTIR) prior to 4.0.3 and 5.x prior to 5.0.3 allows SSRF via Scripted Action tools.
Bestpractical Request Tracker For Incident Response
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
administrator privileges
CVE-2024-1579
hardcoded
CVE-2023-20198
CVE-2024-33587
CVE-2024-33449
CVE-2024-4308
HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »