CVE-2020-14454

An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008...

CVE-2020-14454

Mattermost Desktop App vulnerability CVE-2020-14454 affects versions prior to 4.4.0. Root cause: improper handling of server redirects, enabling an attacker to open web pages within the desktop app via mishandled redirection (MMSA-2020-0008). Impact details in sources indicate the issue could rel...

CVE-2020-14454

An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008...

Stack Overflow Vulnerability in RZoffice

RZoffice is an MS Office compatible desktop software. RZoffice suffers from a stack overflow vulnerability. An attacker could exploit this vulnerability to conduct a denial of service attack...

Cisco Webex Meetings Desktop App Installed (Mac OS X)

Binary data macosxciscowebexmeetingsdesktopappinstalled.nbin...

CVE-2016-11064: Improper Control of Generation of Code

An issue was discovered in Mattermost Desktop App before 3.4.0. Strings could be executed as code via injection...

PT-2020-14014

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.4.0 Description An issue was discovered where server redirection is mishandled, allowing attackers to open web pages in the desktop application. Recommendations For versions prior to 4.4.0, update to...

PT-2020-14015

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.4.0 Description An issue in the Mattermost Desktop App allows phishing due to mishandled HTTP Basic Authentication prompting. Recommendations For versions prior to 4.4.0, update to version 4.4.0 or...

PT-2020-14016

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.4.0 Description An issue was discovered where the Same Origin Policy is mishandled during access-control decisions for web APIs. Recommendations For versions prior to 4.4.0, update to version 4.4.0 or...

PT-2020-8908

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.0.0 Description An issue was discovered that mishandled the Same Origin Policy for setPermissionRequestHandler, affecting features such as video, audio, and notifications. Recommendations For versions...

PT-2020-7993

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop App versions prior to 3.4.0 Description: An issue was discovered where strings could be executed as code via injection. Recommendations: For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue...

PT-2020-10819

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.3.0 Description An issue was discovered that allows dylib injection. Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue...

Cisco Webex Meetings Desktop App for Mac Update Feature Code Execution (cisco-sa-webex-client-mac-X7vp65BL)

According to its self-reported version, Cisco Webex Meetings Desktop App for Mac is affected by a remote code execution vulnerability due to improper validation of cryptographic protections on files that are downloaded by the application as part of a software update. An unauthenticated, remote...

PT-2020-10824

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 4.2.2 Description An issue allows attackers to execute arbitrary code via a crafted link. Recommendations For versions prior to 4.2.2, update to version 4.2.2 or later to resolve the issue...

CVE-2018-21265: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin Policy for setPermissionRequestHandler e.g., video, audio, and notifications...

CVE-2019-20861: Undefined Security Weakness

An issue was discovered in Mattermost Desktop App before 4.2.2. It allows attackers to execute arbitrary code via a crafted link...

CVE-2019-20856: Uncontrolled Search Path Element

An issue was discovered in Mattermost Desktop App before 4.3.0 on macOS. It allows dylib injection...

CVE-2020-14456: Origin Validation Error

An issue was discovered in Mattermost Desktop App before 4.4.0. The Same Origin Policy is mishandled during access-control decisions for web APIs, aka MMSA-2020-0006...

CVE-2020-14455: Improper Authentication

An issue was discovered in Mattermost Desktop App before 4.4.0. Prompting for HTTP Basic Authentication is mishandled, allowing phishing, aka MMSA-2020-0007...

CVE-2020-14454: URL Redirection to Untrusted Site

An issue was discovered in Mattermost Desktop App before 4.4.0. Attackers can open web pages in the desktop application because server redirection is mishandled, aka MMSA-2020-0008...