Browse CVEs

CRITICAL 9.8 CVE-2024-12687 Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue a… Plextrac 2.8.1+ Fix from $2,3002024-12-16 CRITICAL 9.8 CVE-2024-11838 External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue af… Plextrac 2.8.1+ Fix from $2,3002024-12-13 HIGH 7.5 CVE-2024-11839 Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue aff… Plextrac 2.8.1+ Fix from $1,9502024-12-13 CRITICAL 9.8 CVE-2024-11837 Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac  allows N1QL Injection.This issue af… Plextrac 2.8.1+ Fix from $2,3002024-12-13 CRITICAL 9.1 CVE-2024-11833 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affe… Plextrac 2.8.1+ Fix from $2,3002024-12-13 CRITICAL 9.1 CVE-2024-11834 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affe… Plextrac 2.8.1+ Fix from $2,3002024-12-13 HIGH 7.5 CVE-2024-11835 Uncontrolled Resource Consumption vulnerability in PlexTrac allows WebSocket DoS.This issue affects PlexTrac: from 1.61.3 before 2.8.1. Plextrac 2.8.1+ Fix from $1,9502024-12-13 HIGH 7.5 CVE-2024-11836 Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 … Plextrac 2.8.1+ Fix from $1,9502024-12-13 HIGH 8.8 CVE-2022-37144 The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in pos… Plextrac 1.17.0+ Fix from $1,9502022-09-08 HIGH 7.5 CVE-2022-37145 The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authent… Plextrac 1.17.0+ Fix from $1,9502022-09-08 MEDIUM 5.3 CVE-2022-37146 The PlexTrac platform prior to version 1.28.0 allows for username enumeration via HTTP response times on invalid login attempts for users configured … Plextrac 1.28.0+ Fix from $1,6002022-09-08