Vulnerabilities (CVE)

Filtered by vendor Intercom Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-14365 1 Intercom 1 Intercom 2019-11-14 5.0 MEDIUM 7.5 HIGH
The Intercom plugin through 1.2.1 for WordPress leaks a Slack Access Token in source code. An attacker can obtain a lot of information about the victim's Slack (channels, members, etc.).
CVE-2017-10815 1 Intercom 1 Malion 2017-08-15 6.8 MEDIUM 8.1 HIGH
MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.