Skip to content
Noroxi

roundup-tracker records

13 published records for vendor roundup-tracker.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2008-1475
    26Monitor

    The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read rest

    MediumCVSS 6.4No exploitEPSS 2%

    roundup-tracker · roundupMar 24, 2008

  • CVE-2019-10904
    24Monitor

    Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.

    MediumCVSS 6.1No exploitEPSS 2%

    debian · debian linuxApr 6, 2019

  • CVE-2012-6133
    24Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Roundup before 1.4.20 allow remote attackers to inject arbitrary web script or HTML v

    MediumCVSS 6.1No exploitEPSS 2%

    roundup-tracker · roundupJan 30, 2020

  • CVE-2004-1444
    23Monitor

    Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via ..

    MediumCVSS 5.0Proof of conceptEPSS 9%

    roundup-tracker · roundupDec 31, 2004

  • CVE-2024-39126
    21Monitor

    Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, and SVG documents.

    MediumCVSS 5.4No exploitEPSS 0%

    roundup-tracker · roundupJul 17, 2024

  • CVE-2024-39124
    21Monitor

    In Roundup before 2.4.0, classhelpers (_generic.help.html) allow XSS.

    MediumCVSS 5.4No exploitEPSS 0%

    roundup-tracker · roundupJul 17, 2024

  • CVE-2024-39125
    21Monitor

    Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header.

    MediumCVSS 5.4No exploitEPSS 0%

    roundup-tracker · roundupJul 17, 2024

  • CVE-2010-2491
    18Monitor

    Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or

    MediumCVSS 4.3No exploitEPSS 3%

    roundup-tracker · roundupSep 24, 2010

  • CVE-2012-6131
    18Monitor

    Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or

    MediumCVSS 4.3No exploitEPSS 2%

    roundup-tracker · roundupApr 11, 2014

  • CVE-2012-6130
    18Monitor

    Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web scr

    MediumCVSS 4.3No exploitEPSS 2%

    roundup-tracker · roundupApr 11, 2014

  • CVE-2012-6132
    18Monitor

    Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk

    MediumCVSS 4.3No exploitEPSS 2%

    roundup-tracker · roundupApr 10, 2014

  • CVE-2014-6276
    17Monitor

    schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenti

    MediumCVSS 4.3No exploitEPSS 2%

    roundup-tracker · roundupApr 13, 2016

  • CVE-2008-1474
    17Monitor

    Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-s

    MediumCVSS 4.3No exploitEPSS 1%

    roundup-tracker · roundupMar 24, 2008