Mattermost Server Path Traversal Vulnerability (CNVD-2020-35450)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.8.2, prior to 3.7.5, and prior to 3.6.7. An attacker could exploit the vulnerability to execute code...

Mattermost Server Cross-Site Request Forgery Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A cross-site request forgery vulnerability exists in Mattermost Server versions prior to 2.1.0. The vulnerability stems from a WEB application that does not adequately validate whether a request is...

Mattermost Server Authorization Issues Vulnerability (CNVD-2020-35462)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.0.2. An attacker could exploit the vulnerability to obtain information...

Mattermost Server Trust Management Issues Vulnerability (CNVD-2020-35447)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.9.0 that stems from encryption and signature verification not being mandatory. No details of the vulnerability are provided a...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41490)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0 that stems from the program not following domain name requirements when processing join requests for public teams. An...

Mattermost Server Injection Vulnerability

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.2.0. An attacker can exploit the vulnerability by injecting to read LDAP fields...

Mattermost Desktop App Code Injection Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A code injection vulnerability exists in Mattermost Desktop App versions prior to 3.4.0. The vulnerability stems from a network system or product not properly filtering specific elements of externally entered data duri...

Mattermost Server path traversal vulnerability (CNVD-2020-48227)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A path traversal vulnerability exists in Mattermost Server versions prior to 4.3.0, prior to 4.2.1, and prior to 4.1.2. The vulnerability stems from a failure of a network system or product to...

UBUNTU-CVE-2020-13274

A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1...

LibVNCServer Infinite Loop Vulnerability

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in programs. A security vulnerability exists in the libvncclient/sockets.c file in versions of LibVNCServer prior to 0.9.13, which stems from a program faili...

Cisco Network Services Orchestrator Information Disclosure Vulnerability

Cisco Network Services Orchestrator NSO is the United States Cisco Cisco company's set of network automation services solutions. An information disclosure vulnerability exists in the CLI in Cisco NSO Release prior to 4.7.7.3 and Release prior to 5.1.4.2. A local attacker could exploit this...

CVE-2020-0541

Out-of-bounds write in subsystem for IntelR CSME versions before 12.0.64, 13.0.32, 14.0.33 and 14.5.12 may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2020-8502 · Adns +2 · Adns +2

Name of the Vulnerable Software and Affected Versions: adns versions prior to 1.5.2 Description: An issue was discovered in adns where it hangs and consumes CPU resources if a compression pointer loop is encountered. Recommendations: For versions prior to 1.5.2, update to version 1.5.2 or later t...

Combodo iTop Cross-Site Scripting Vulnerability (CNVD-2020-35968)

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management. A cross-site scripting vulnerability exists in the id of th...

Foxit PhantomPDF Mac Code Issues Vulnerabilities

Foxit PhantomPDF Mac is China Foxit Foxit company's a macOS-based PDF document reader. A code issue vulnerability exists in Foxit PhantomPDF Mac versions prior to 3.4. The vulnerability stems from an improperly designed or implemented problem in the code development process of a networked system ...

Foxit PhantomPDF Mishandling of Homonyms Vulnerability

PhantomPDF is a Chinese Foxit Foxit company for enterprise-level users of PDF document processing software. A vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10 due to improper handling of homonyms. An attacker can exploit this vulnerability to cause an impact on the integrity of...

Foxit PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-32446)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A buffer overflow vulnerability exists in Foxit PhantomPDF versions prior to 8.3.11. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries,...

Foxit PhantomPDF Resource Management Error Vulnerability (CNVD-2020-32462)

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.7. An attacker could exploit this vulnerability to cause the application to crash...

Multiple Mozilla Products Resource Management Error Vulnerability (CNVD-2020-41075)

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

Elasticsearch Kibana Cross-Site Scripting Vulnerability (CNVD-2020-38067)

Elasticsearch Kibana is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands. A cross-site scripting vulnerability exists in Elasticsearch Kibana versions prior to 6.8.9 and prior to 7.7.0. The vulnerability stems from the WEB...