Skip to content
Noroxi

edgewall software records

13 published records for vendor edgewall software.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    13 records
    • CVE-2007-1406
      40Plan

      Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unkn

      CriticalCVSS 10.0No exploitEPSS 1%

      edgewall software · tracMar 10, 2007

    • CVE-2005-4065
      31Monitor

      SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via

      HighCVSS 7.5Proof of conceptEPSS 3%

      edgewall software · tracDec 7, 2005

    • CVE-2005-3980
      31Monitor

      SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrar

      HighCVSS 7.5Proof of conceptEPSS 3%

      edgewall software · tracDec 4, 2005

    • CVE-2006-5878
      31Monitor

      Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as

      HighCVSS 7.5No exploitEPSS 2%

      edgewall software · tracNov 14, 2006

    • CVE-2010-0394
      28Monitor

      PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac,

      MediumCVSS 6.8No exploitEPSS 3%

      debian · debian linuxFeb 9, 2010

    • CVE-2006-3695
      28Monitor

      Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText)

      MediumCVSS 6.8No exploitEPSS 1%

      edgewall software · tracJul 21, 2006

    • CVE-2005-2007
      26Monitor

      Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a ..

      MediumCVSS 6.4No exploitEPSS 1%

      edgewall software · tracJun 19, 2005

    • CVE-2005-2147
      25Monitor

      Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2)

      MediumCVSS 6.4No exploitEPSS 1%

      edgewall software · tracJul 6, 2005

    • CVE-2005-4644
      17Monitor

      Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web sc

      MediumCVSS 4.3No exploitEPSS 1%

      edgewall software · tracDec 31, 2005

    • CVE-2005-4305
      17Monitor

      Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HT

      MediumCVSS 4.3No exploitEPSS 1%

      edgewall software · tracDec 16, 2005

    • CVE-2006-2106
      17Monitor

      Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script

      MediumCVSS 4.3No exploitEPSS 1%

      edgewall software · tracApr 29, 2006

    • CVE-2008-3328
      17Monitor

      Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or

      MediumCVSS 4.3No exploitEPSS 1%

      edgewall software · tracJul 27, 2008

    • CVE-2007-1405
      17Monitor

      Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explor

      MediumCVSS 4.3No exploitEPSS 1%

      edgewall software · tracMar 10, 2007