5982 matches found
CVE-2025-49810
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
Mattermost Lack of Access Control Validation
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
GHSA-PWVR-GRQG-7VP2 Mattermost Lack of Access Control Validation
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper validating access controls at time of access. An attacker can gain unauthorized access to thread content by leveraging AI-generated posts. Remediation Upgrade...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper validating access controls at time of access. An attacker can gain unauthorized access to thread content by leveraging AI-generated posts. Remediation Upgrade...
CVE-2025-49810
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
CVE-2025-49810 Thread summarization allows persistent access to channel
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
CVE-2025-49810 Thread summarization allows persistent access to channel
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
CVE-2025-49810 Thread summarization allows persistent access to channel
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
CVE-2025-50938
Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...
ROS-20250821-06
A vulnerability in the Perl programming language is related to the race condition if a directory descriptor is opened when the thread is created. Exploitation of the vulnerability could allow an attacker to interfere with the application's behavior...
CLSA-2025-1755707175 kernel: Fix of CVE-2023-52572
cifs: Fix UAF in cifsdemultiplexthread CVE-2023-52572...
kernel: Fix of CVE-2023-52572
cifs: Fix UAF in cifsdemultiplexthread CVE-2023-52572...
SUSE CVE-2025-38615
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: cancle set bad inode after removing name fails The reproducer uses a file0 on a ntfs3 file system with a corrupted ilink. When renaming, the file0's inode is marked as a bad inode because the file name cannot be deleted...
CVE-2025-50938
Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...
CVE-2025-50938
Cross site scripting XSS vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php...
Linux Distros Unpatched Vulnerability : CVE-2025-23166
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The C++ method SignTraits::DeriveBits may incorrectly call ThrowException based on user-supplied inputs when executing in a background thread, crashing the...
CVE-2025-50938
Hustoj version 2025-01-31 is vulnerable to a Cross-Site Scripting (XSS) flaw located in the thread.php file. The root cause is the improper neutralization of the TID parameter, which allows for parameter injection. This vulnerability can lead to XSS attacks against users interacting with the syst...