Unrestricted file upload vulnerability in unspecified web services in Johnson Controls Metasys 4.1 through 6.5, as used in Application and Data Server (ADS), Extended Application and Data Server (aka. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
RCE
File Upload
Metsys
NVD
CVSS 2.0
10.0
EPSS
2.6%
Unspecified vulnerability in MyBB (aka MyBulletinBoard) before 1.8.4 has unknown attack vectors related to "Group join request notifications sent to wrong group leaders.". Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Mybb
NVD
CVSS 2.0
10.0
EPSS
0.4%