CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2024-555502.7/LOWEPSS 38.2%CISA KEV

2024-12-10

Mitel MiCollab Directory Traversal Local File Read Vulnerability Advisory (CVE-2024-55550)

[Affected Scope] Mitel MiCollab through 9.8 SP2

[Impact] An authenticated attacker with administrative privileges can exploit insufficient input sanitization to read arbitrary non-sensitive local system files

[Mitigation] Apply the official security patches or upgrade to the latest supported version immediately

CWE-22 local-file-read directory-traversal authenticated-admin

Full Advisory & Mitigation

CVE-2019-184268.2/HIGHEPSS 67.9%CISA KEV

2020-01-21

WhatsApp Desktop Cross-Site Scripting (XSS) and Local File Read Vulnerability (CVE-2019-18426)

[Affected Scope] WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10

[Impact] Cross-site scripting (XSS) and local file reading, potentially leading to remote code execution (RCE) and sensitive data exfiltration upon user interaction

[Mitigation] Immediately update WhatsApp Desktop to version 0.3.9309 or higher and WhatsApp for iPhone to version 2.20.10 or higher

CWE-79 cross-site-scripting local-file-read electron cisa-kev

Full Advisory & Mitigation