Skip to content
OpenAdvisories

Archive

18 March 2022

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Low 2.8

    Yokogawa WideField3 Buffer Copy Without Checking Size of Input

    In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.

  • Low 2.0

    HTML Injection while inviting Guests

    Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registered users with special permissions to invite guest users to inject unescaped HTML content in the email invitations.

  • Low 3.3

    Sysadmin can override existing configs & bypass restrictions like EnableUploads

    One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain restricted configuration…