Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bestpractical vulnerabilities and exploits
(subscribe to this query)
445
VMScore
CVE-2014-1474
Algorithmic complexity vulnerability in Email::Address::List prior to 0.02, as used in RT 4.2.0 up to and including 4.2.2, allows remote malicious users to cause a denial of service (CPU consumption) via a string without an address.
Email\\ \\ Address\\
Bestpractical Rt 4.2.1
Bestpractical Rt 4.2.0
Bestpractical Rt 4.2.2
383
VMScore
CVE-2015-5475
Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x prior to 4.2.12 allow remote malicious users to inject arbitrary web script or HTML via vectors related to the (1) user and (2) group rights management pages.
Bestpractical Request Tracker
NA
CVE-2023-45024
Best Practical Request Tracker (RT) 5 prior to 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.
Bestpractical Request Tracker
NA
CVE-2023-41259
Best Practical Request Tracker (RT) prior to 4.4.7 and 5.x prior to 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call.
Bestpractical Request Tracker
NA
CVE-2023-41260
Best Practical Request Tracker (RT) prior to 4.4.7 and 5.x prior to 5.0.5 allows Information Exposure in responses to mail-gateway REST API calls.
Bestpractical Request Tracker
383
VMScore
CVE-2015-6506
Cross-site scripting (XSS) vulnerability in the cryptography interface in Request Tracker (RT) prior to 4.2.12 allows remote malicious users to inject arbitrary web script or HTML via a crafted public key.
Bestpractical Request Tracker
NA
CVE-2022-25802
Best Practical Request Tracker (RT) prior to 4.4.6 and 5.x prior to 5.0.3 allows XSS via a crafted content type for an attachment.
Bestpractical Request Tracker
NA
CVE-2022-25803
Best Practical Request Tracker (RT) prior to 5.0.3 has an Open Redirect via a ticket search.
Bestpractical Request Tracker
NA
CVE-2022-25800
Best Practical RT for Incident Response (RTIR) prior to 4.0.3 and 5.x prior to 5.0.3 allows SSRF via the whois lookup tool.
Bestpractical Request Tracker For Incident Response
NA
CVE-2022-25801
Best Practical RT for Incident Response (RTIR) prior to 4.0.3 and 5.x prior to 5.0.3 allows SSRF via Scripted Action tools.
Bestpractical Request Tracker For Incident Response
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
camera
bypass
CVE-2024-3592
CVE-2024-37383
CVE-2024-24919
CVE-2024-27822
CVE-2024-36788
CVE-2024-36789
man-in-the-middle
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »