JVN#88993473: Multiple vulnerabilities in multiple ELECOM LAN routers

Multiple ELECOM LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Buffer overflow CWE-121 - CVE-2021-20852 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2| AV:A/AC:L/Au:S/C:P/I:P/A:P| Base Score...

CVE-2019-20858

Mattermost Server vulnerable to a DoS via crafted characters in a SQL LIKE clause to an APIv4 endpoint, affecting versions before 5.15.0. Root cause tied to SQL LIKE handling in the APIv4 path; impact is CPU consumption (high). No exploitation details are provided in the sources. Remediation: upg...

CVE-2018-20858

Recommender before 2018-07-18 allows XSS...

CVE-2018-20858

Recommender before 2018-07-18 allows XSS...

CVE-2018-20858

CVE-2018-20858 affects the Recommender XBlock (edX Recommender) with a cross-site scripting vulnerability in versions prior to 2018-07-18. The issue stems from improper validation of client-side data, enabling XSS when a user views a crafted resource. Public advisories (GHSA) indicate this could ...