Bugtracker.net - vulnerabilities (CVEs)

5 CVEs in 1 products, 3 in the last 30 days, newest from 2026-10-07.

Products

CVE-2026-92533 - CVSS 7.1 (high), 2026-10-07: Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate…
CVE-2026-92532 - CVSS 7.5 (high), 2026-10-07: Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the…
CVE-2026-92531 - CVSS 7.5 (high), 2026-10-07: Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field…
CVE-2008-0336 - CVSS 4.3 (medium), 2008-01-17: Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2 allow remote attackers to delete arbitrary bugs and perform other…
CVE-2008-0335 - CVSS 4.3 (medium), 2008-01-17: Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote attackers to inject arbitrary web script or HTML via an arbitrary custom…