NA - CVE-2024-31195 - Out-of-bounds Read vulnerability in Open...
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine...
NA - CVE-2024-31196 - Unchecked Return Value to NULL Pointer...
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine...
NA - CVE-2024-31197 - Improper Null Termination vulnerability in Open...
Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This...
NA - CVE-2024-31198 - Out-of-bounds Read vulnerability in Open...
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue...
NA - CVE-2024-8891 - An attacker with no knowledge of the current...
An attacker with no knowledge of the current users in the web application, could build a dictionary of potential users and check the server responses as it indicates whether or not the user is...
NA - CVE-2022-25769 - ImpactThe default .htaccess file has some...
ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as...
NA - CVE-2022-25774 - Prior to the patched version, logged in users...
Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when...
NA - CVE-2022-25775 - Prior to the patched version, logged in users...
Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login,...
NA - CVE-2022-25776 - Prior to the patched version, logged in users...
Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing. Users could potentially access sensitive data such...