CVSS: 7.5EPSS: 0%CPEs: 45EXPL: 0CVE-2009-4405
https://notcve.org/view.php?id=CVE-2009-4405
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "check for the 'raw' role that is missing in docutils < 0.6." Mútiples vulnerabilidades no especificadas en Trac versiones anteriores a v0.11.6 tienen impacto y vectores de ataque desconocidos, posiblemente relacionados con (1) "verificaciones de políticas en informes de resultados cuando se usan formatos alternativos" o (2) una "verificación para el role 'raw' que no se encuentra en docutils < 0.6". • http://secunia.com/advisories/37807 http://secunia.com/advisories/37901 http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE http://www.vupen.com/english/advisories/2009/3615 https://bugzilla.redhat.com/show_bug.cgi?id=542394 https://exchange.xforce.ibmcloud.com/vulnerabilities/54983 https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01169.html •
CVSS: 7.5EPSS: 0%CPEs: 32EXPL: 0CVE-2008-5646
https://notcve.org/view.php?id=CVE-2008-5646
Unspecified vulnerability in Trac before 0.11.2 allows attackers to cause a denial of service via unknown attack vectors related to "certain wiki markup." Vulnerabilidad no especificada en Trac anterior a v0.11.2, permite a los atacantes provocar una denegación de servicio a través de vectores de ataque desconocidos relacionados con "determinado marcado wiki" (certain wiki markup). • http://secunia.com/advisories/32652 http://trac.edgewall.org/wiki/ChangeLog http://www.securityfocus.com/bid/32226 http://www.vupen.com/english/advisories/2008/3080 https://exchange.xforce.ibmcloud.com/vulnerabilities/46492 •
CVSS: 5.0EPSS: 0%CPEs: 32EXPL: 0CVE-2008-5647
https://notcve.org/view.php?id=CVE-2008-5647
Unspecified vulnerability in the HTML sanitizer filter in Trac before 0.11.2 allows attackers to conduct phishing attacks via unknown attack vectors. Vulnerabilidad no especificada en el filtro HTML sanitizer de Trac anterior a 0.11.2, permite a los atacantes dirigir ataques de phishing a través de vectores de ataque desconocidos. • http://secunia.com/advisories/32652 http://trac.edgewall.org/wiki/ChangeLog http://www.securityfocus.com/bid/32226 http://www.vupen.com/english/advisories/2008/3080 https://exchange.xforce.ibmcloud.com/vulnerabilities/46491 •
CVSS: 4.3EPSS: 0%CPEs: 28EXPL: 0CVE-2008-3328
https://notcve.org/view.php?id=CVE-2008-3328
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Vulnerabilidad de ejecución de comandos en sitios cruzados (XSS) en el Motor del wiki en Trac anterior a 0.10.5, permite a atacantes remotos inyectar secuencias de comandos web y HTML de su elección a través de vectores desconocidos. • http://secunia.com/advisories/31231 http://secunia.com/advisories/31314 http://trac.edgewall.org/wiki/ChangeLog http://www.securityfocus.com/bid/30400 http://www.vupen.com/english/advisories/2008/2223/references https://exchange.xforce.ibmcloud.com/vulnerabilities/44016 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01270.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 2%CPEs: 23EXPL: 0CVE-2006-5878
https://notcve.org/view.php?id=CVE-2006-5878
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors. Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en Edgewall Trac 0.10 y anteriores permite a atacantes remotos realizar acciones no autorizadas como otros usuarios mediante vectores desconocidos. • http://secunia.com/advisories/22789 http://secunia.com/advisories/22868 http://secunia.com/advisories/23357 http://security.gentoo.org/glsa/glsa-200612-14.xml http://trac.edgewall.org/ticket/4049 http://trac.edgewall.org/wiki/ChangeLog http://www.debian.org/security/2006/dsa-1209 http://www.vupen.com/english/advisories/2006/4422 https://exchange.xforce.ibmcloud.com/vulnerabilities/30146 •