79 matches found
Mattermost Server 10.11.x < 10.11.20 / 11.6.x < 11.6.5 / 11.7.x < 11.7.2 Incorrect Authorization (MMSA-2026-00653)
The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2026-00653 advisory. - Mattermost versions 11.7.x = 11.7.1, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to restrict metric configuration changes to the playbook being saved, which...
CVE-2026-6541 Unscoped updates to other playbooks' metric configuration
Mattermost versions 11.7.x = 11.7.1, 11.6.x = 11.6.4, 10.11.x = 10.11.19 fail to restrict metric configuration changes to the playbook being saved, which allows an authenticated user with team access to alter another user’s playbook metric settings via a crafted import or update request with a...
MiracleLinux 9 : java-1.8.0-openjdk-1.8.0.392.b08-3.el9.ML.1 (AXSA:2023-6541:22)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6541:22 advisory. OpenJDK: segmentation fault in ciMethodBlocks CVE-2022-40433 OpenJDK: IOR deserialization issue in CORBA 8303384 CVE-2023-22067 OpenJDK: certificate...
MiracleLinux 7 : zziplib-0.13.62-11.el7 (AXSA:2019-4047:01)
The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-4047:01 advisory. zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c CVE-2018-6541 zziplib: Memory leak triggered in the function...
CVE-2025-6541
creationtimestamp| type| source ---|---|--- 2025-10-21 01:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3o7sbltzu2h 2025-10-21 13:19:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115412353242186528 2025-10-21 22:22:40+00:00| seen|...
CVE-2025-6541
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface...
EUVD-2019-6541
Malware in sbrugna...
CVE-2023-6541
The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
CVE-2023-6541
The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
CVE-2023-6541 Allow SVG < 1.2.0 - Author+ Stored XSS via SVG
The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
CVE-2023-6541
The Allow SVG WordPress plugin, in versions prior to 1.2.0 , fails to properly sanitize uploaded SVG files. This vulnerability allows users with permissions as low as Author to upload malicious SVG files containing Cross-Site Scripting (XSS) payloads. To remediate this issue, users are recommende...
CVE-2023-6541 Allow SVG < 1.2.0 - Author+ Stored XSS via SVG
The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...
WordPress Allow SVG Plugin < 1.2.0 is vulnerable to Cross Site Scripting (XSS)
Software Allow SVG Type Plugin Vulnerable versions 1.2.0 Fixed in 1.2.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6541 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID e1ff41df5c9e Credits Bob Matyas Required privilege...
Ubuntu: Security Advisory (USN-6541-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS : GNU C Library regression (USN-6541-2)
The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6541-2 advisory. USN-6541-1 fixed vulnerabilities in the GNU C Library. Unfortunately, changes made to allow proper application of the fix for CVE-2023-4806 in Ubuntu 22.04 LTS...
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : GNU C Library vulnerabilities (USN-6541-1)
The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6541-1 advisory. It was discovered that the GNU C Library was not properly handling certain memory operations. An attacker cou...
SUSE CVE-2020-6541
Use after free in WebUSB in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
RHEL 8 : php:7.4 (RHSA-2022:6541)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6541 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: ArchiveTar: allows an unserialization...
