Vulnerability fixed in Mattermost

A vulnerability has been fixed in Mattermost with versions lower than 6.5. Email invitations to a Mattermost channel or server are insufficiently invalidated when selected by an administrator. This allows a person to still participate in Mattermost channels even though access has been revoked aft...

CVE-2022-1385

Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from the system console, which allows accidentally invited users to join the workspace and access information from the public teams and channels...

CVE-2022-24721 Incorrect Authorization in org.cometd.oort

CometD is a scalable comet implementation for web messaging. In any version prior to 5.0.11, 6.0.6, and 7.0.6, internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may b...

CVE-2021-43054

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any...

CVE-2021-43054

The eFTL Server component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains an easily exploitable vulnerability that allows a low privileged attacker with network access to generate API tokens that can access any...

Motorola MH702 信任管理问题漏洞

The Motorola MH702 is a router from Motorola USA. A trust management issue vulnerability exists in Motorola MH702x devices prior to version 2.0.0.301, which can be exploited by an attacker to gain access to a communication channel by failing to properly validate server credentials when...

Mattermost Server Access Control Error Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An Access Control Error vulnerability exists in Mattermost Server versions prior to 5.18.0, which arises from a network system or product that does not properly restrict access to resources from...

The vulnerabilities in the modules src/User.cpp, src/znc.cpp, and src/IRCNetwork.cpp, which are responsible for disabling clients from connecting to the IRC server or the selected channel, allow a malicious actor to cause service failures.

The vulnerabilities in the modules src/User.cpp, src/znc.cpp, and src/IRCNetwork.cpp, which allow for disabling clients from connecting to the IRC server or the selected channel, exist due to insufficient validation of input data. Exploiting these vulnerabilities could enable a malicious actor to...

MGASA-2017-0478 Updated bind packages fix security vulnerability

It was discovered that Bind incorrectly handled certain malformed responses to an ANY query. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service CVE-2016-9131. It was discovered that Bind incorrectly handled certain malformed responses to an AN...