BeyondTrust Remote Support (RS) <= 26.2.3 Improper Origin Validation (BT26-05)

The version of BeyondTrust Remote Support RS running on the remote host is prior or equal to 26.2.3. It is, therefore, potentially affected by an improper origin validation vulnerability: - The internal messaging component of BeyondTrust Remote Support RS does not adequately validate the origin o...

EUVD-2004-2413

Malware in sbrugna...

Devolutions Server Access Control Vulnerability

Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server versions 2025.2.4.0 and earlier and 2025.1.11.0 and earlier, which stems from improper access contro...

Chamilo LMS security vulnerabilities

Chamilo LMS is an open source online learning and collaboration system from Chamilo Open Source. The system supports the creation of instructional content, remote training, and online question and answer sessions. A security vulnerability exists in Chamilo LMS version 1.11.28, which stems from th...

CVE-2023-40642

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2022-14662 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue involves an unauthorized broadcast in the Messaging component, potentially leading to a Local Deny of Service. Recommendations: For Android versions prior to the fixed version...

PT-2022-14463 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the Messaging component, allowing the attachment of private files to SMS messages. This could lead to local information disclosure without requiring...

Messaging Component Code Execution

The vulnerability of the messaging component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

Google Chrome Messaging Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Messaging component of Google Chrome versions prior to 102.0.5005.61, which arises from a mix-up in the instructions responsible for freeing memory in the Messaging component program...

PT-2022-2798

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the messaging component of the browsers, which can lead to heap corruption. This...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Messaging component of Google Chrome versions prior to 102.0.5005.61, which arises from a mix-up in the instructions responsible for freeing memory in the Messaging component program...

MESSAGING SAP_XIAF Disclosure Information

The vulnerability of the MESSAGING and SAPXIAF components of the SAP NetWeaver Process Integration software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

PT-2017-2879

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to insufficient access control in the Android operating system's messaging component. It may allow a remote attacker to cause a denial of service. Recommendations For Android...

Android Data Access

The vulnerability of the AOSP Messaging component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to data beyond their authorized levels of permission, using a specially crafted file...

RHEL 6 : Red Hat Enterprise MRG Messaging 2.3 (RHSA-2013:0562)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0562 advisory. Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased...

Vulnerability in DotNetNuke Could Allow Arbitrary Script Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting DotNetNuke 6.0.2 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor, DotNetNuke. DotNetNuke...

PT-2012-2044

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions prior to 6.1.0.41 Description The issue concerns the SibRaRecoverableSiXaResource class in the Default Messaging Component, which does not properly handle a Service Integration Bus dump operation...

CVE-2011-5066: Exposure of Sensitive Information to an Unauthorized Actor

The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus SIB dump operation involving the First Failure Data Capture FFDC introspection code, which allows local users to...

Directory traversal

Directory traversal vulnerability in the Messaging commessaging component before 1.5.1 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter in a messages action to index.php. NOTE: the provenance of this...

CVE-2009-4946

CVE-2009-4946 describes a directory traversal vulnerability in Joomla!'s Messaging (com_messaging) component prior to 1.5.1. The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter of the messages action to index...