10 matches found
CVE-2026-42185
People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain could send a crafted invitation request to promote any existing user including users with no current domain access to the...
CVE-2025-15542
Improper handling of exceptional conditions in VX800v v1.0 in SIP processing allows an attacker to flood the device with crafted INVITE messages, blocking all voice lines and causing a denial of service on incoming calls...
EUVD-2016-5591
Malware in sbrugna...
Code injection
Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using attacker-controlled email addresses via crafted invitation token...
CVE-2021-37862
Mattermost 6.0 and earlier are affected by an input-validation vulnerability in the registration flow: email addresses are not sufficiently validated, enabling an attacker to induce users to register with attacker-controlled emails via a crafted invitation token. Affected component: registration/...
CVE-2021-37862
Mattermost 6.0 and earlier fails to sufficiently validate the email address during registration, which allows attackers to trick users into signing up using attacker-controlled email addresses via crafted invitation token...
Mattermost 代码问题漏洞
An input validation error vulnerability exists in Mattermost 6.0 and prior versions of Mattermost, an open source collaboration platform from Mattermost, Inc. The vulnerability stems from the program's failure to properly validate email addresses during registration. An attacker could exploit the...
CVE-2016-4605
Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a crafted invitation...
CVE-2016-4605
Calendar in Apple iOS before 9.3.3 allows remote attackers to cause a denial of service NULL pointer dereference and device restart via a crafted invitation...
CVE-2016-4605
Apple iOS 9.3.3 fixes a Calendar denial-of-service flaw (CVE-2016-4605) caused by a NULL pointer dereference when processing a crafted calendar invitation. Affected: iOS 9.3.x devices (Calendar component). Root cause: memory handling issue leading to device restart. Remediation: install iOS 9.3.3...