|
3671
|
8.4 |
HIGH
Local
|
-
|
-
|
An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external …
|
-
|
CVE-2026-5804
|
2026-05-20 02:57 |
2026-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3672
|
5.0 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate the Host header when constructing response URLs for custom slash commands which allows an authenticated attacker to redirect…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-6333
|
2026-05-20 02:51 |
2026-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3673
|
4.8 |
MEDIUM
Network
|
nozominetworks
|
cmc
guardian
|
A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges ca…
|
CWE-79
Cross-site Scripting
|
CVE-2025-40901
|
2026-05-20 02:47 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3674
|
9.8 |
CRITICAL
Network
|
h2o
|
h2o
|
A security flaw has been discovered in h2oai h2o-3 up to 7402. This affects the function importBinaryModel of the file h2o-core/src/main/java/hex/Model.java of the component JAR Handler. Performing a…
|
CWE-20
CWE-502
Improper Input Validation
Deserialization of Untrusted Data
|
CVE-2026-8751
|
2026-05-20 02:46 |
2026-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3675
|
4.8 |
MEDIUM
Network
|
nozominetworks
|
cmc
guardian
|
A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a mal…
|
CWE-79
Cross-site Scripting
|
CVE-2025-40902
|
2026-05-20 02:44 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3676
|
4.8 |
MEDIUM
Network
|
nozominetworks
|
cmc
guardian
|
A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with administrative privileg…
|
CWE-79
Cross-site Scripting
|
CVE-2025-40903
|
2026-05-20 02:44 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3677
|
5.3 |
MEDIUM
Network
|
h2o
|
h2o
|
A weakness has been identified in h2oai h2o-3 up to 7402. This vulnerability affects the function exec of the file h2o-core/src/main/java/water/rapids/ast/prims/misc/AstSetProperty.java of the compon…
|
CWE-266
CWE-284
NVD-CWE-noinfo
Incorrect Privilege Assignment
Improper Access Control
|
CVE-2026-8752
|
2026-05-20 02:44 |
2026-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3678
|
5.4 |
MEDIUM
Network
|
nozominetworks
|
cmc
guardian
|
A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malici…
|
CWE-79
Cross-site Scripting
|
CVE-2025-40904
|
2026-05-20 02:41 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3679
|
4.8 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to escape some variables that could contain malicious content during error page composition which allows an attacker with access to edit…
|
CWE-79
Cross-site Scripting
|
CVE-2026-3495
|
2026-05-20 02:37 |
2026-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3680
|
4.3 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check the create_post channel permission during post edit operations which allows an authenticated attacker with re…
|
CWE-862
Missing Authorization
|
CVE-2026-3637
|
2026-05-20 02:34 |
2026-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
