| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2012-5523 | 5.5 | core/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifications about restricted bugs, which might allow remote authenticated users to obtain sensitive information by adding a note to a bug before losing perm | 2021-01-12 18:05:00 | 2012-11-16 00:55:00 |
| CVE-2012-5522 | 5.5 | MantisBT before 1.2.12 does not use an expected default value during decisions about whether a user may modify the status of a bug, which allows remote authenticated users to bypass intended access restrictions and make status changes by leveraging a | 2021-01-12 18:05:00 | 2012-11-16 00:55:00 |
| CVE-2012-1123 | 7.5 | The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password. | 2021-01-12 18:05:00 | 2012-06-29 19:55:00 |
| CVE-2012-1121 | 4.9 | MantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users with manager privileges to (1) modify or (2) delete global categories. | 2021-01-12 18:05:00 | 2012-06-29 19:55:00 |
| CVE-2012-1120 | 3.6 | The SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete and delete_bug_threshold permissions, which allows remote authenticated users with read and write SOAP API privileges to delete arbitrary bug reports a | 2021-01-12 18:05:00 | 2012-06-29 19:55:00 |
| CVE-2012-1119 | 6.4 | MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection. | 2021-01-12 18:05:00 | 2012-06-29 19:55:00 |
| CVE-2012-2692 | 3.6 | MantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security_validation is set to OFF, which allows remote authenticated users with certain privileges to bypass intended access restrictions and delete arbitrary | 2021-01-12 18:05:00 | 2012-06-17 03:41:00 |
| CVE-2012-2691 | 7.5 | The mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check privileges, which allows remote attackers with bug reporting privileges to edit arbitrary bugnotes via a SOAP request. | 2021-01-12 18:05:00 | 2012-06-17 03:41:00 |
| CVE-2020-35111 | 4.3 | When an extension with the proxy permission registered to receive <all_urls>, the proxy.onRequest callback was not triggered for view-source URLs. While web content cannot navigate to such URLs, a user opening View Source could have inadvertently lea | 2021-01-12 16:52:00 | 2021-01-07 14:15:00 |
| CVE-2020-26979 | 5.8 | When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing | 2021-01-12 16:38:00 | 2021-01-07 14:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: