Search Results | AttackerKB

Show filters

Topics 76 Users 9,714

Clear All

Disclosure Date

Disclosure Year Disclosure Month

Collection Command and Control Credential Access Defense Evasion Discovery Execution Exfiltration Impact Initial Access Lateral Movement Persistence Privilege Escalation

76 Total Results

Displaying 41-50 of 76

Attacker Value

Unknown

CVE-2014-3050

Disclosure Date: July 29, 2014 (last updated October 05, 2023)

IBM Rational Team Concert (RTC) 3.x before 3.0.1.6 IF3 and 4.x before 4.0.7 does not properly integrate with build engines, which allows remote authenticated users to discover credentials via unspecified vectors.

0

Attacker Value

Unknown

CVE-2013-3736

Disclosure Date: May 05, 2014 (last updated October 05, 2023)

Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file.

0

Attacker Value

Unknown

CVE-2013-5404

Disclosure Date: December 10, 2013 (last updated October 05, 2023)

Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.

0

Attacker Value

Unknown

CVE-2013-3369

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote authenticated users with the permissions to view the administration pages to execute arbitrary private components via unspecified vectors.

0

Attacker Value

Unknown

CVE-2013-3370

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 does not properly restrict access to private callback components, which allows remote attackers to have an unspecified impact via a direct request.

0

Attacker Value

Unknown

CVE-2013-3373

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.

0

Attacker Value

Unknown

CVE-2013-5587

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket. NOTE: this issue has been SPLIT from CVE-2013-3371 due to different affected versions.

0

Attacker Value

Unknown

CVE-2012-4733

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

Request Tracker (RT) 4.x before 4.0.13 does not properly enforce the DeleteTicket and "custom lifecycle transition" permission, which allows remote authenticated users with the ModifyTicket permission to delete tickets via unspecified vectors.

0

Attacker Value

Unknown

CVE-2013-3371

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 3.8.3 through 3.8.16 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the filename of an attachment.

0

Attacker Value

Unknown

CVE-2013-3372

Disclosure Date: August 23, 2013 (last updated October 05, 2023)

Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject multiple Content-Disposition HTTP headers and possibly conduct cross-site scripting (XSS) attacks via unspecified vectors.

0