|
266711
|
8.8 |
HIGH
Network
|
ideracorp
|
webyog_monyog_ultimate
|
A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAd…
|
CWE-565
Reliance on Cookies without Validation and Integrity Checking
|
CVE-2016-15002
|
2024-11-21 11:45 |
2022-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266712
|
7.4 |
HIGH
Network
|
oauth-ruby_project
|
oauth-ruby
|
lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot be found, which allows man-in-the-middle attackers to spoof…
|
CWE-295
Improper Certificate Validation
|
CVE-2016-11086
|
2024-11-21 11:45 |
2020-09-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266713
|
6.5 |
MEDIUM
Network
|
expresstech
|
quiz_and_survey_master
|
php/qmn_options_questions_tab.php in the quiz-master-next plugin before 4.7.9 for WordPress allows CSRF, with resultant stored XSS, via the question_name parameter because js/admin_question.js mishan…
|
CWE-352 CWE-79
Origin Validation Error Cross-site Scripting
|
CVE-2016-11085
|
2024-11-21 11:45 |
2020-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266714
|
6.1 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 2.1.0. It allows XSS via CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2016-11084
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266715
|
6.1 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS because it configures files to be opened in a browser window.
|
CWE-79
Cross-site Scripting
|
CVE-2016-11083
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266716
|
6.1 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 2.2.0. It allows XSS via a crafted link.
|
CWE-79
Cross-site Scripting
|
CVE-2016-11082
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266717
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 2.2.0. It allows unintended access to information stored by a web browser.
|
CWE-200
Information Exposure
|
CVE-2016-11081
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266718
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 3.0.0. It offers superfluous APIs for a Team Administrator to view account details.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2016-11080
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266719
|
6.1 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 3.0.0. It allows XSS via a redirect URL.
|
CWE-79
Cross-site Scripting
|
CVE-2016-11079
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266720
|
6.5 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
An issue was discovered in Mattermost Server before 3.0.0. It potentially allows attackers to obtain sensitive information (credential fields within config.json) via the System Console UI.
|
CWE-200
Information Exposure
|
CVE-2016-11078
|
2024-11-21 11:45 |
2020-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|