Lucene search
+L

46 matches found

osv_cve
osv_cve
•added 2023/11/06 3:24 p.m.•23 views

CVE-2023-5967 Denial of Service via crashing the Calls Plugin

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin...

4.3CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/11/06 3:24 p.m.•45 views

CVE-2023-5967 Denial of Service via crashing the Calls Plugin

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin...

4.3CVSS4.9AI score0.00508EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/06 12:00 a.m.•6 views

CVE-2023-5967: Improper Check for Unusual or Exceptional Conditions

Mattermost fails to properly validate requests to the Calls plugin, allowing an attacker sending a request without a User Agent header to cause a panic and crash the Calls plugin...

4.3CVSS5.5AI score0.00508EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/06 12:00 a.m.•5 views

PT-2023-32449

Name of the Vulnerable Software and Affected Versions Mattermost affected versions not specified Description The issue arises from Mattermost's failure to properly validate requests to the Calls plugin. An attacker can exploit this by sending a request without a User Agent header, which can cause...

4.3CVSS5.7AI score0.00508EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/11/06 12:00 a.m.•28 views

Mattermost Code Issues Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from not properly validating requests to the Calls plugin, which allows an attacker to crash the Calls plugin when sending a request without...

4.3CVSS6.8AI score0.00508EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/08/16 7:15 p.m.•14 views

CVE-2021-34656

The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the vwsnotice function found in the /inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7...

6.1CVSS5.8AI score0.00895EPSS
SaveExploits1References2
Rows per page
Query Builder