Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,730 results · page 26 of 35
Oct 18, 2021Wechat Reward: Does not sanitise or escape its QR settingsCVE-2021-24615 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Wechat Reward WordPress plugin through 1.7 does not sanitise or escape its QR settings, nor has any CSRF check in place, allowing attackers to make a logged in admin change the settings and perform Cross-Site Scripting attacks.
- Product
- Wechat Reward
- Affected
- up to 1.7
- What to do
- Affects up to 1.7. Update Wechat Reward to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Oct 18, 2021A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks.CVE-2020-8291 · Other software · Rocket.chat · reported by support@hackerone.comMedium 6.1
A link preview rendering issue in Rocket.Chat versions before 3.9 could lead to potential XSS attacks.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2021AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged NotCVE-2021-40854 · Other software · Anydesk · reported by MITREHigh 7.8
AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged Notepad process that can launch other applications.
- Product
- Anydesk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordanydesk.comanydesk.com
Oct 7, 2021Zulip is an open source team chat server.CVE-2021-41115 · Other software · zulip · reported by GitHubMedium 4.3
Zulip is an open source team chat server. In affected versions Zulip allows organization administrators on a server to configure "linkifiers" that automatically create links from messages that users send, detected via arbitrary regular expressions. Malicious organization administrators could subject the server to a denial-of-service via regular expression complexity attacks; most simply, by configuring a quadratic-time regular expression in a linkifier, and sending messages that exploited it. A regular expression attempted to parse the user-provided regexes to verify that they were safe from ReDoS -- this was both insufficient, as well as _itself_ subject to ReDoS if the organization administrator entered a sufficiently complex invalid regex. Affected users should [upgrade to the just-released Zulip 4.7](https://zulip.readthedocs.io/en/latest/production/upgrade-or-modify.html#upgrading-to-a-release), or [`main`](https://zulip.readthedocs.io/en/latest/production/upgrade-or-modify.html#upgrading-from-a-git-repository).
- Product
- zulip
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 4, 2021Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window.CVE-2020-28119 · Other software · 53kf · reported by MITREMedium 6.1
Cross site scripting vulnerability in 53KF < 2.0.0.2 that allows for arbitrary code to be executed via crafted HTML statement inserted into chat window.
- Product
- 53kf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2021Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message.CVE-2021-33672 · Network & remote access · SAP SE · reported by cna@sap.comCritical 9.6
Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.
- Product
- SAP Contact Center
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlaunchpad.support.sap.comwiki.scn.sap.com
Sep 10, 2021On Page SEO + Whatsapp Chat Button Plugin: Reflected Cross-Site ScriptingCVE-2021-38332 · WordPress plugins & themes · reported by WordfenceMedium 6.1
The On Page SEO + Whatsapp Chat Button Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/settings.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1.
- Product
- On Page SEO + Whatsapp Chat Button Plugin
- Affected
- up to 1.0.1
- What to do
- Affects up to 1.0.1. Update On Page SEO + Whatsapp Chat Button Plugin to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Sep 5, 2021WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/reCVE-2021-40516 · Other software · Weechat · reported by MITREHigh 7.5
WeeChat before 3.2.1 allows remote attackers to cause a denial of service (crash) via a crafted WebSocket frame that trigger an out-of-bounds read in plugins/relay/relay-websocket.c in the Relay plugin.
- Product
- Weechat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlists.debian.org
Aug 30, 2021Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript.CVE-2021-32832 · Other software · RocketChat · reported by GitHubMedium 4.3
Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.
- Product
- Rocket.Chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.rocket.chatgithub.com
Aug 16, 20212Way VideoCalls and Random Chat - HTML5 Webcam Videochat: Reflected Cross-Site ScriptingCVE-2021-34656 · WordPress plugins & themes · reported by WordfenceMedium 6.1
The 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `vws_notice` function found in the ~/inc/requirements.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 5.2.7.
- Product
- 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat
- Affected
- up to 5.2.7
- What to do
- Affects up to 5.2.7. Update 2Way VideoCalls and Random Chat - HTML5 Webcam Videochat to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordplugins.trac.wordpress.orgwordfence.com
Aug 9, 2021A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL iCVE-2021-22910 · Other software · Rocket.chat · reported by support@hackerone.comCritical 9.8
A sanitization vulnerability exists in Rocket.Chat server versions <3.13.2, <3.12.4, <3.11.4 that allowed queries to an endpoint which could result in a NoSQL injection, potentially leading to RCE.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.sonarsource.comhackerone.com
Jul 30, 2021eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.CVE-2020-15948 · Other software · Egain · reported by MITREMedium 6.1
eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.
- Product
- Chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.compacketstormsecurity.com
Jul 19, 2021A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafteCVE-2021-34817 · Other software · Etherpad · reported by MITREMedium 6.1
A Cross-Site Scripting (XSS) issue in the chat component of Etherpad 1.8.13 allows remote attackers to inject arbitrary JavaScript or HTML by importing a crafted pad.
- Product
- Etherpad
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.sonarsource.cometherpad.org
Jul 19, 2021sz.chat version 4 allows injection of web scripts and HTML in the message box.CVE-2021-3279 · Other software · Fortics · reported by MITREMedium 6.1
sz.chat version 4 allows injection of web scripts and HTML in the message box.
- Product
- Szchat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordborrachariadofael.sz.chatyoutube.com
Jul 16, 2021chatwoot is vulnerable to Inefficient Regular Expression ComplexityCVE-2021-3649 · Other software · chatwoot · reported by security@huntr.devHigh 7.5
chatwoot is vulnerable to Inefficient Regular Expression Complexity
- Product
- chatwoot/chatwoot
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2021Nextcloud Talk is a fully on-premises audio/video and chat communication service.CVE-2021-32689 · Other software · nextcloud · reported by GitHubHigh 8.1
Nextcloud Talk is a fully on-premises audio/video and chat communication service. In versions prior to 11.2.2, if a user was able to reuse an earlier used username, they could get access to any chat message sent to the previous user with this username. The issue was patched in versions 11.2.2 and 11.3.0. As a workaround, don't allow users to choose usernames themselves. This is the default behaviour of Nextcloud, but some user providers may allow doing so.
- Product
- security-advisories
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2021The Rocket.Chat desktop application 2.17.11 opens external links without user interaction.CVE-2020-26763 · Other software · Rocket.chat · reported by MITREHigh 7.5
The Rocket.Chat desktop application 2.17.11 opens external links without user interaction.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 15, 2021Nextcloud Talk is a fully on-premises audio/video and chat communication service.CVE-2021-32676 · Other software · nextcloud · reported by GitHubMedium 6.5
Nextcloud Talk is a fully on-premises audio/video and chat communication service. Password protected shared chats in Talk before version 9.0.10, 10.0.8 and 11.2.2 did not rotate the session cookie after a successful authentication event. It is recommended that the Nextcloud Talk App is upgraded to 9.0.10, 10.0.8 or 11.2.2. No workarounds for this vulnerability are known to exist.
- Product
- security-advisories
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comhackerone.com
Jun 7, 2021iFlyChat: Does not sanitise its APP ID setting before outputting it back in the pageCVE-2021-24343 · WordPress plugins & themes · reported by WPScanMedium 4.8
The iFlyChat WordPress plugin before 4.7.0 does not sanitise its APP ID setting before outputting it back in the page, leading to an authenticated Stored Cross-Site Scripting issue
- Product
- iFlyChat
- Fixed in
- 4.7.0
- What to do
- Update iFlyChat to 4.7.0 or newer.
May 27, 2021A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentiCVE-2021-22911 · Other software · Rocket.chat · reported by support@hackerone.comCritical 9.8
A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3.12 & 3.13 that could lead to unauthenticated NoSQL injection, resulting potentially in RCE.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.compacketstormsecurity.com
May 27, 2021An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed email addresses to be disclosed by enumeratCVE-2021-22892 · Other software · Rocket.chat · reported by support@hackerone.comHigh 7.5
An information disclosure vulnerability exists in the Rocket.Chat server fixed v3.13, v3.12.2 & v3.11.3 that allowed email addresses to be disclosed by enumeration and validation checks.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackerone.comhackerone.com
May 20, 2021Pajbot is a Twitch chat bot.CVE-2021-32632 · Other software · pajbot · reported by GitHubLow 2.4
Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery (CSRF). Hosters of the bot should upgrade to `v1.52` or `stable` to install the patch or, as a workaround, can add one modern dependency.
- Product
- pajbot
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
May 17, 2021Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page.CVE-2021-32622 · Other software · matrix-org · reported by GitHubMedium 4.2
Matrix-React-SDK is a react-based SDK for inserting a Matrix chat/voip client into a web page. Before version 3.21.0, when uploading a file, the local file preview can lead to execution of scripts embedded in the uploaded file. This can only occur after several user interactions to open the preview in a separate tab. This only impacts the local user while in the process of uploading. It cannot be exploited remotely or by other users. This vulnerability is patched in version 3.21.0.
- Product
- matrix-react-sdk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 6, 2021The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX aCVE-2021-24246 · WordPress plugins & themes · reported by WPScanMedium 5.4
The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues
- Product
- Workscout Core
- Fixed in
- 1.3.4
- What to do
- Update Workscout Core to 1.3.4 or newer.
Apr 21, 2021Discord-Recon is a bot for the Discord chat service.CVE-2021-29466 · Other software · DEMON1A · reported by GitHubMedium 6.5
Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file `app.py` and add `.replace('..', '')` into the `Path` variable inside of the `recon` function. The vulnerability is patched in version 0.0.4.
- Product
- Discord-Recon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 21, 2021Discord-Recon is a bot for the Discord chat service.CVE-2021-29465 · Other software · DEMON1A · reported by GitHubHigh 8.3
Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files on the system. As a workaround, bot maintainers can edit their `setting.py` file then add `<` and `>` into the `RCE` variable inside of it to fix the issue without an update. The vulnerability is patched in version 0.0.4.
- Product
- Discord-Recon
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 21, 2021Wrongthink is an encrypted peer-to-peer chat program.CVE-2021-29467 · Other software · birb-digital · reported by GitHubMedium 6.1
Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1.
- Product
- wrongthink
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 21, 2021Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.phpCVE-2021-31329 · Other software · Remoteclinic · reported by MITREMedium 5.4
Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php
- Product
- Remote Clinic
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 14, 2021This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version.CVE-2021-27247 · Other software · Tencent · reported by zdi-disclosures@trendmicro.comMedium 6.5
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-11907.
- Product
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordzerodayinitiative.comzerodayinitiative.com
Apr 9, 2021Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction.CVE-2021-30480 · Other software · Zoom · reported by MITREHigh 8.5
Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An attacker must be within the same organization, or an external party who has been accepted as a contact. NOTE: this is specific to the Zoom Chat software, which is different from the chat feature of the Zoom Meetings and Zoom Video Webinars software.
- Product
- Chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.malwarebytes.comexplore.zoom.us
Apr 1, 2021Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.CVE-2021-27653 · Other software · Pega Systems · reported by security@pega.comMedium 6.6
Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure.
- Product
- Pega Infinity
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcollaborate.pega.comrobertwillishacking.com
Mar 29, 2021Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feCVE-2021-29267 · Other software · Sherlockim · reported by MITREMedium 6.1
Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature.
- Product
- Sherlockim
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsherlockim.ae
Mar 26, 2021Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inCVE-2021-22886 · Other software · Rocket.chat · reported by support@hackerone.comMedium 6.1
Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.rocket.chatgithub.com
Mar 17, 2021The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessiCVE-2020-35456 · Other software · Taidii · reported by MITREMedium 5.5
The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging.
- Product
- Diibear
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.complay.google.com
Feb 22, 2021Chatbox is affected by cross-site scripting (XSS).CVE-2020-35852 · Other software · Getgist · reported by MITREMedium 6.1
Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS.
- Product
- Chatbox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgetgist.comgetgist.com
Feb 10, 2021This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18.CVE-2020-27874 · Other software · Tencent · reported by zdi-disclosures@trendmicro.comHigh 8.8
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM Decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-11580.
- Product
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordzerodayinitiative.comzerodayinitiative.com
Feb 10, 2021A stored XSS issue exists in henriquedornas 5.2.17 via online live chat.CVE-2021-26938 · Other software · Henriquedornas · reported by MITREMedium 5.4
A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product exists. That henriquedornas is the web design agency and 5.2.17 is simply the PHP version running on this hosts
- Product
- Henriquedornas
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 29, 2021The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to userCVE-2021-3176 · Email & office · Mitel · reported by MITREHigh 8
The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data.
- Product
- Businesscti Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 26, 2021Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.CVE-2020-8292 · Other software · Rocket.chat · reported by support@hackerone.comMedium 5.4
Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.rocket.chathackerone.com
Jan 26, 2021The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.CVE-2020-8288 · Other software · Rocket.chat · reported by support@hackerone.comMedium 5.4
The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.rocket.chathackerone.com
Jan 13, 2021An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/apiCVE-2020-23653 · Other software · Thinkadmin · reported by MITRECritical 9.8
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
- Product
- Thinkadmin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 11, 2021XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php.CVE-2020-23643 · Other software · Jizhicms · reported by MITREMedium 6.1
XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php.
- Product
- Jizhicms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 8, 2021An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.CVE-2020-28208 · Other software · Rocket.chat · reported by MITREMedium 5.3
An email address enumeration vulnerability exists in the password reset function of Rocket.Chat through 3.9.1.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Jan 4, 2021Creeper is an experimental dynamic, interpreted language.CVE-2020-26292 · Other software · chatter-social · reported by GitHubLow 3.1
Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26, 2020 at 11:00 PM EST. If you used the source code, you are **NOT** affected. This only affects the binary releases. The binary of unknown quality has been removed from the release. If you have downloaded the binary, please delete it and run a reputable antivirus scanner to ensure that your computer is clean.
- Product
- Creeper
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 30, 2020Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login.CVE-2020-29594 · Other software · Rocket.chat · reported by MITRECritical 9.8
Rocket.Chat before 0.74.4, 1.x before 1.3.4, 2.x before 2.4.13, 3.x before 3.7.3, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 mishandles SAML login.
- Product
- Rocket.chat
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 18, 2020The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user infCVE-2020-27154 · Email & office · Mitel · reported by MITREHigh 8.8
The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gain access to user information by sending arbitrary code, due to improper input validation. A successful exploit could allow an attacker to view the user information and application data.
- Product
- Businesscti Enterprise
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 12, 2020Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.CVE-2020-35199 · Other software · Igniterealtime · reported by MITREMedium 5.4
Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
- Product
- Openfire
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexploit-db.comexploit-db.com
Nov 5, 2020Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.CVE-2020-25399 · Other software · Mind · reported by MITREHigh 7.8
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
- Product
- Imind Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2020Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the ticketCVE-2020-1777 · Other software · OTRS AG · reported by security@otrs.comMedium 4.3
Agent names that participates in a chat conversation are revealed in certain parts of the external interface as well as in chat transcriptions inside the tickets, when system is configured to mask real agent names. This issue affects OTRS; 7.0.21 and prior versions, 8.0.6 and prior versions.
- Product
- OTRS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 14, 2020Live Chat - Live support version 3.1.0 and earlier: Cross-site request forgery (CSRF)CVE-2020-5642 · WordPress plugins & themes · reported by vultures@jpcert.or.jpHigh 8.8
Cross-site request forgery (CSRF) vulnerability in Live Chat - Live support version 3.1.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
- Product
- Live Chat - Live support version 3.1.0 and earlier
- Affected
- up to 3.1.0
- What to do
- Affects up to 3.1.0. Update Live Chat - Live support version 3.1.0 and earlier to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordjvn.jpplugins.trac.wordpress.org
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.