Filter
AND
AND
Mantisbt MantisbtThe mc_issue_note_update function in the SOAP API in MantisBT before 1.2.11 does not properly check …
7.5
First published (updated )
Mantisbt MantisbtThe mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows …
7.5
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier fo…
6.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt Mantisbtcore/email_api.php in MantisBT before 1.2.12 does not properly manage the sending of e-mail notifica…
5.5
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.12 does not use an expected default value during decisions about whether a user …
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt MantisbtMantis 1.1.x through 1.1.2 and 1.2.x through 1.2.0a2 does not set the secure flag for the session co…
First published (updated )
Mantisbt MantisbtMantisBT before 1.2.9 does not properly check permissions, which allows remote authenticated users w…
4.9
First published (updated )
Mantisbt MantisbtThe access_has_bug_level function in core/access_api.php in MantisBT before 1.2.9 does not properly …
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Mantisbt MantisbtMantisBT before 1.2.11 does not check the delete_attachments_threshold permission when form_security…
3.6
First published (updated )
Mantisbt MantisbtThe SOAP API in MantisBT before 1.2.9 does not properly enforce the bugnote_allow_user_edit_delete a…
3.6
First published (updated )
Mantisbt Mantisbtbug_actiongroup.php in MantisBT before 1.2.9 does not properly check the report_bug_threshold permis…
3.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.