Unspecified Vulnerability in Mattermost Server (CNVD-2020-48234)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.3.0, 4.2.1, and 4.1.2. The vulnerability can be exploited by an attacker to gain privileges with a registered OAuth applicati...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-52024)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.1.0, 4.1.1 and 4.0.5. An attacker can exploit the vulnerability with the help of a specially crafted post to cause a web...

Mattermost Server Resource Management Error Vulnerability (CNVD-2020-36216)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.2.2, prior to 5.1.2, and prior to 4.10.4. A remote attacker could exploit this vulnerability to cause a denial of service...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-36215)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.3.0. An attacker can exploit this vulnerability to perform timing attacks...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-52022)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 4.2.0, 4.1.1 and 4.0.5. An attacker can exploit the vulnerability by adding a DEBUG line to the log with the help of the loggin...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41491)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0. The vulnerability can be exploited by an attacker to perform unauthorized operations when Town Square is set to read-onl...

Mattermost Server Information Disclosure Vulnerability (CNVD-2020-35329)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.0.0. The vulnerability can be exploited to obtain sensitive information credentials field in config.json through the system...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-48225)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.1. An attacker can exploit this vulnerability to bypass the intended access restrictions for creating group message channels...

Mattermost Server Information Disclosure Vulnerability (CNVD-2020-41493)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An information disclosure vulnerability exists in Mattermost Server versions prior to 5.8.0. An attacker could exploit this vulnerability to obtain sensitive information...

DEBIAN-CVE-2020-8164

A deserialization of untrusted data vulnerability exists in rails 5.2.4.3, rails 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters...

Sophos XG Firewall Buffer Overflow Vulnerability

Sophos XG Firewall is a next-generation endpoint protection and enterprise-class firewall product from Sophos UK. A buffer overflow vulnerability exists in the awarrensmtp component in Sophos XG Firewall 17.5 MR11 and prior versions. A remote attacker can exploit this vulnerability to execute...

mversion command injection vulnerability

mversion is an application packaging processor from Mikael Brevik Software Developers in Norway. A command injection vulnerability exists in versions prior to mversion 2.0.0. A remote attacker could exploit the vulnerability to execute code...

PT-2020-14018 · Mattermost · Mattermost Server

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 5.19.0 Description: An issue allows attackers to discover private channels via the "get channel by name" API endpoint. Recommendations: For versions prior to 5.19.0, update to version 5.19.0 or later to...

Mitsubishi Electric MC Works64 Code Issue Vulnerability

Mitsubishi Electric MC Works64 is a data acquisition and monitoring system SCADA from Mitsubishi Electric Japan. A code issue vulnerability exists in Mitsubishi Electric MC Works64 4.02C 10.95.208.31 and prior versions, which can be exploited by a remote attacker to execute code and cause a denia...

PT-2020-7997

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 3.2.0 Description: An issue was discovered that allows attackers to read LDAP fields via injection. Recommendations: For versions prior to 3.2.0, update to version 3.2.0 or later to resolve the issue...

Nordaaker Convos Password Management Vulnerability

Nordaaker Convos is a Norwegian company Nordaaker's Web browser-based open source multi-user chat application . A security vulnerability exists in the Core/Settings.pm and Util.pm files in Nordaaker Convos versions prior to 4.20. The vulnerability stems from a poorly designed or implemented probl...

PT-2020-14019 · Mattermost · Mattermost Server

Name of the Vulnerable Software and Affected Versions: Mattermost Server versions prior to 5.19.0 Description: An issue was discovered that allows attackers to rename a channel and cause a collision with a direct message. Recommendations: For versions prior to 5.19.0, update to version 5.19.0 or...

PT-2020-8901

Name of the Vulnerable Software and Affected Versions Mattermost Server versions prior to 5.1 Description An issue in Mattermost Server allows attackers to cause a denial of service via the invite people slash command. Recommendations For versions prior to 5.1, update to version 5.1 or later to...

Unspecified Vulnerability in LibVNCServer

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the libvncclient/rfbproto.c file in versions of LibVNCServer prior to 0.9.13, which stems from the program's...

LibVNCServer Buffer Overflow Vulnerability (CNVD-2020-36788)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A buffer overflow vulnerability exists in the libvncserver/corre.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...