A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

Published at: June 22, 2020 at 02:15PM
View on website

In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.

Published at: June 23, 2020 at 01:15PM
View on website

In FreeRDP before version 2.1.2, an out of bound reads occurs resulting in accessing a memory location that is outside of the boundaries of the static array PRIMARY_DRAWING_ORDER_FIELD_BYTES. This is fixed in version 2.1.2.

Published at: June 22, 2020 at 06:15PM
View on website

An issue was discovered in Mattermost Server before 1.2.0. It allows attackers to cause a denial of service (memory consumption) via a small compressed file that has a large size when uncompressed.

Published at: June 19, 2020 at 04:15PM
View on website

An issue was discovered in Mattermost Server before 3.5.1. E-mail address verification can be bypassed.

Published at: June 19, 2020 at 04:15PM
View on website