CVE-2024-11358 Insecure Android File Provider Paths

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

CVE-2024-11358

Mattermost Android Mobile Apps (versions

CVE-2024-11358 Insecure Android File Provider Paths

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

Mattermost Mobile Apps Security Vulnerabilities

Mattermost Mobile Apps is a messaging mobile application from Mattermost USA. A security vulnerability exists in Mattermost Mobile Apps version 2.21.0 and prior versions that stems from a failure to properly profile the provider program...

CVE-2024-11358: Improper Access Control

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

Microsoft Access Memory Use After Free Code Execution

The vulnerability of Microsoft Access database management systems, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

Microsoft Office Code Execution

Packages such as Microsoft Office, Microsoft 365 Apps, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server are associated with operations that involve writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-12042: Unrestricted Upload of File with Dangerous Type

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the profile picture upload functionality in all versions up to, and including, 4.16.4 due to insufficient file type validation. This makes it possible for...

Microsoft Office Memory Use After Free Code Execution

The vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Excel relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

KLA78054 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49147 Exploitation Related products Microsoft-PC-Manager CVE list CVE-2024-49147 critical Solution Install necessary updates from th...

be.objectify:objectify-struts2-tags (1.0), org.apache.empire-db:empire-db-struts2 (>=2.0.5-incubating, <=2.0.6-incubating) +29 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.1.6)

org.apache.struts:struts2-core MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - be.objectify:objectify-struts2-tags 1.0 - org.apache.empire-db:empire-db-struts2 =2.0.5-incubating,...

org.apache.continuum:continuum-core (>=1.3.3, <=1.4.0), org.apache.continuum:continuum-webapp (>=1.3.1, <=1.4.0) +19 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.0.14)

org.apache.struts:struts2-core MAVEN version 2.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.continuum:continuum-core =1.3.3, =1.3.1, =1.4.0 - org.apache.struts:struts2-apps 2.0.14...

br.net.woodstock.rockframework:rockframework-web (>=1.2.1, <=1.2.2), net.sf.fastupload:fastupload-core (0.4.7) +25 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.1.2)

org.apache.struts:struts2-core MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - br.net.woodstock.rockframework:rockframework-web =1.2.1, =1.2.2 - net.sf.fastupload:fastupload-core...

com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension (1.5.5), com.googlecode.struts2-conversation:struts2-conversation-scope-plugin (1.3.1) +55 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.1.2)

org.apache.struts:struts2-core MAVEN version 2.3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension 1.5.5 -...

com.github.httl:httl-struts (>=1.0.10, <=1.0.11), com.jgeppert.struts2.bootstrap:struts2-bootstrap-plugin (>=1.5.0, <=1.5.2) +100 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.4.1)

org.apache.struts:struts2-core MAVEN version 2.3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.httl:httl-struts =1.0.10, =1.5.0, =1.5.0, =1.5.2 - org.apache.struts:struts2-apps...

com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension (>=1.7.3, <=1.7.4), com.googlecode.struts2-conversation:struts2-conversation-scope-plugin (>=1.7.3, <=1.7.4) +43 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.12)

org.apache.struts:struts2-core MAVEN version 2.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.googlecode.struts2-conversation:struts2-conversation-config-browser-extension =1.7.3, =1.7.3,...

org.apache.struts:struts2-apps (2.3.14.1), org.apache.struts:struts2-assembly (2.3.14.1) +38 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.14.1)

org.apache.struts:struts2-core MAVEN version 2.3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - org.apache.struts:struts2-apps 2.3.14.1 - org.apache.struts:struts2-assembly 2.3.14.1 -...

com.github.umeshawasthi:struts2-jsr303-validation-plugin (1.0), de.grobmeier.json:jjson-struts2 (>=0.0.7, <=0.0.9) +39 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.3.15.2)

org.apache.struts:struts2-core MAVEN version 2.3.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.github.umeshawasthi:struts2-jsr303-validation-plugin 1.0 - de.grobmeier.json:jjson-struts2...

com.amazonaws.serverless:aws-serverless-java-container-struts2 (>=1.3.1, <=1.5.1), com.jgeppert.struts2:struts2-aws-lambda-support-plugin (1.2.0) +41 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.20)

org.apache.struts:struts2-core MAVEN version 2.5.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amazonaws.serverless:aws-serverless-java-container-struts2 =1.3.1, =3.0-alpha-48, =3.0-alpha-4...

com.amazonaws.serverless:aws-serverless-java-container-struts2 (1.5.2), com.jgeppert.struts2:struts2-aws-lambda-support-example (1.2.0) +83 more potentially affected by CVE-2024-53677 via org.apache.struts:struts2-core (2.5.22)

org.apache.struts:struts2-core MAVEN version 2.5.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.struts:struts2-core and may be impacted: - com.amazonaws.serverless:aws-serverless-java-container-struts2 1.5.2 -...