İçeriğe atla
Noroxi

edgewall software kayıtları

edgewall software üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    13 kayıt
    • CVE-2007-1406
      40Planlayın

      Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unkn

      KritikCVSS 10,0İstismar yokEPSS %1

      edgewall software · trac10 Mar 2007

    • CVE-2005-4065
      31İzleyin

      SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via

      YüksekCVSS 7,5Kavram kanıtıEPSS %4

      edgewall software · trac7 Ara 2005

    • CVE-2005-3980
      31İzleyin

      SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrar

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      edgewall software · trac4 Ara 2005

    • CVE-2006-5878
      31İzleyin

      Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as

      YüksekCVSS 7,5İstismar yokEPSS %2

      edgewall software · trac14 Kas 2006

    • CVE-2010-0394
      28İzleyin

      PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac,

      OrtaCVSS 6,8İstismar yokEPSS %3

      debian · debian linux9 Şub 2010

    • CVE-2006-3695
      28İzleyin

      Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText)

      OrtaCVSS 6,8İstismar yokEPSS %2

      edgewall software · trac21 Tem 2006

    • CVE-2005-2007
      26İzleyin

      Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a ..

      OrtaCVSS 6,4İstismar yokEPSS %2

      edgewall software · trac19 Haz 2005

    • CVE-2005-2147
      25İzleyin

      Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to the (1) upload or (2)

      OrtaCVSS 6,4İstismar yokEPSS %1

      edgewall software · trac6 Tem 2005

    • CVE-2005-4644
      17İzleyin

      Cross-site scripting (XSS) vulnerability in the HTML WikiProcessor in Edgewall Trac 0.9.2 allows remote attackers to inject arbitrary web sc

      OrtaCVSS 4,3İstismar yokEPSS %2

      edgewall software · trac31 Ara 2005

    • CVE-2005-4305
      17İzleyin

      Cross-site scripting (XSS) vulnerability in Edgewall Trac 0.9, 0.9.1, and 0.9.2 allows remote attackers to inject arbitrary web script or HT

      OrtaCVSS 4,3İstismar yokEPSS %1

      edgewall software · trac16 Ara 2005

    • CVE-2006-2106
      17İzleyin

      Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script

      OrtaCVSS 4,3İstismar yokEPSS %1

      edgewall software · trac29 Nis 2006

    • CVE-2008-3328
      17İzleyin

      Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or

      OrtaCVSS 4,3İstismar yokEPSS %1

      edgewall software · trac27 Tem 2008

    • CVE-2007-1405
      17İzleyin

      Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explor

      OrtaCVSS 4,3İstismar yokEPSS %1

      edgewall software · trac10 Mar 2007