CVEs published in June 2020
2,026 vulnerabilities, 225 critical, 10 exploited.
- mattermost serverMattermost Server is vulnerable to SQL Injection when executing multiple POST requests9.8 Critical
- mattermost serverMattermost Server is vulnerable to XSS through display name field6.1 Medium
- mattermost serverMattermost Server has intermittent Authorization bypass for resource-owners8.1 High
- mattermost serverMattermost Server allows attackers to log sensitive information via DEBUG REST API logging endpoint5.3 Medium
- mattermost serverMattermost Server mishandles redirect denial action6.1 Medium
- mattermost serverMattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials9.8 Critical
- mattermost serverMattermost Server exposes private team invite ID5.3 Medium
- mattermost serverMattermost Server is vulnerable to webhook and slash command manipulation4.3 Medium
- mattermost serverMattermost Server allows attackers to create buttons that can launch API requests4.3 Medium
- mattermost serverMattermost Server does not neutralize HTML content in an Email template field6.1 Medium
- mattermost serverMattermost Server does not safeguard against phishing via error page links6.1 Medium
- mattermost serverMattermost Server exposes OAuth personal access tokens to attackers8.1 High
- mattermost serverMattermost Server has low entropy for authorization data as an OAuth 2.0 Service Provider9.1 Critical
- mattermost serverAn issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS can occur via...6.1 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. XSS could occur via...6.1 Medium
- mattermost serverMattermost Server is vulnerable to XSS through author_link field in Slack attachments6.1 Medium
- mattermost serverMattermost Server allows users with a session ID to revoke another users' session4.3 Medium
- mattermost serverMattermost Server is vulnerable to Directory Traversal by System Admins6.5 Medium
- mattermost serverMattermost Server is vulnerable to channel invisibility DoS via misformatted post5.3 Medium
- mattermost serverMattermost Server's OAuth 2.0 service is vulnerable to attack through Missing Authorization4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.2, 5.1.1, 5.0.3, and 4.10.3. Attackers...4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended...4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. It did not enforce...8.8 High
- vmware toolsVMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service...3.3 Low
- gitlabAn authorization issue in the mirroring logic allowed read access to private repositories in...6.3 Medium
- rubyonrails rails, debian linux +1 moreCSRF Vulnerability in rails-ujs6.5 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact...5.4 Medium
- naviwebs navigate cmsNavigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases ...4.8 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.1. It allows attackers to bypass intended...5.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. An e-mail invite...4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.7.3. It allows attackers to cause a denial...7.5 High
- mattermost desktopAn issue was discovered in Mattermost Desktop App before 4.0.0. It mishandled the Same Origin...5.3 Medium
- mattermost serverMattermost Server vulnerable to Denial of Service through `@` character prefix inserted into JavaScript field names7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.2.2, 5.1.2, and 4.10.4. It allows remote...6.5 Medium
- mattermost serverMattermost Server is vulnerable to XSS attacks against an OAuth 2.0 allow/deny page6.1 Medium
- mattermost serverMattermost Server is vulnerable to Path Traversal when files are stored locally4.9 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the...4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.1. An attacker can bypass intended access...4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events...2.7 Low
- mattermost serverAn issue was discovered in Mattermost Server before 5.2 and 5.1.1. Authorization could be...9.8 Critical
- mattermost serverAn issue was discovered in Mattermost Server before 5.3.0. It mishandles timing.3.7 Low
- mattermost serverMattermost Server does not prevent System Admin from arbitrary file creation4.9 Medium
- mattermost serverMattermost Server has mishandled webhook access control4.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 4.10.1, 4.9.4, and 4.8.2. It allows attackers...5.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It mishandles...5.3 Medium
- mattermost serverAn issue was discovered in Mattermost Server before 5.4.0. It mishandles possession of...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.7, 5.6.3, 5.5.2, and 4.10.5. It allows...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 5.8.0. The first user is sometimes...7.5 High
- mattermost serverAn issue was discovered in Mattermost Server before 4.7.0, 4.6.2, and 4.5.2. An attacker could...8.8 High
- mattermost serverMattermost Server is vulnerable to a Denial of Service attack through `invite_people` command7.5 High
- Show moreLoading…