Bug Parade

Die folgenden Sicherheitslücken wurden von MOGWAI LABS entdeckt und den Anbietern bzw. Open-Source-Projekten gemeldet.

Vulnerability Disclosure Policy.

IDName
MLSA-2024-004Pentaho DI Authenticated Remote Code Execution High
MLSA-2024-003Visual Planning 8 Unauthenticated Remote Code Execution Critical
MLSA-2024-002DataHub GMS Privilege Escalation durch Benutzerregistrierung High
MLSA-2024-001RaspberryMatic Unauthenticated Remote Code Execution Critical
MLSA-2023-004FusionAuth Unauthenticated Local File Disclosure High
MLSA-2023-003Keycloak Device Grant Spoofing Low
MLSA-2023-002mendelson AS2 Admin Service Unauthenticated Remote Code Execution High
MLSA-2023-001x2gowebrpc Unauthenticated OS Command Injection Critical
MLSA-2021-005XML External Entity (XXE) Injection in TwelveMonkeys ImageIO Medium
MLSA-2021-004Unauthenticated Remote Code Execution in Ajax.NET Professional Critical
MLSA-2021-003ZipSlip Schwachstelle in elfinder.NetCore High
MLSA-2021-002Path-Traversal Schwachstelle in elfinder.AspNet und elfinder.NetCore High
MLSA-2021-001ruby-mysql / Metasploit Arbitrary File Read Medium
MLSA-2020-001Cross Site Scripting (XSS) Schwachstelle in vis-timeline Low
MLSA-2018-001Rechte-Erweiterung in Oracle Identity Analytics High