Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/10/17 9:42 a.m.6 views

CVE-2025-58073

Mattermost versions 10.11.x = 10.11.1, 10.10.x = 10.10.2, 10.5.x = 10.5.10 fail to verify a user has permission to join a Mattermost team using the original invite token which allows any attacked to join any team on a Mattermost server regardless of restrictions via manipulating the OAuth state...

8.1CVSS6.8AI score0.00049EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2025/10/16 9:30 a.m.6 views

Mattermost has a Missing Authorization vulnerability

Mattermost versions 10.10.x = 10.10.2, 10.5.x = 10.5.10, 10.11.x = 10.11.2 fail to validate email ownership during Slack import process which allows attackers to create verified user accounts with arbitrary email domains via malicious Slack import data to bypass email-based team access restrictio...

5.4CVSS7AI score0.00013EPSS
Exploits0References6Affected Software2
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:0 a.m.1 views

Mattermost Server 10.10.x < 10.10.2 / 10.11.0 Missing Authorization (MMSA-2025-00513)

The version of Mattermost Server installed on the remote host is affected by a vulnerability as referenced in the MMSA-2025-00513 advisory. - Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or...

6.5CVSS5.5AI score0.00063EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/09/18 11:27 p.m.1 views

SUSE CVE-2025-9076

Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instanc...

6.5CVSS6.7AI score0.00063EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2025/09/15 12:31 p.m.5 views

Mattermost Missing Authorization vulnerability

Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instanc...

6.5CVSS6.7AI score0.00063EPSS
Exploits0References3Affected Software2
Cvelist
Cvelist
added 2025/09/15 10:6 a.m.6 views

CVE-2025-9076 Mattermost Server exposes sensitive user credentials during shared channel membership synchronization

Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instanc...

6.5CVSS0.00063EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/21 12:0 a.m.1 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 10.8.3 and prior to 10.8.x, 10.5.8 and prior to 10.5.x, 9.11.17 and prior to 9.11.x, 10.10.0 and prior to 10.10.x, and 10.9.3 and prior to 10.9.x,...

4.9CVSS6.3AI score0.00155EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/03 12:0 a.m.6 views

Canonical Ubuntu Linux SEoL (10.10.x)

According to its version, Canonical Ubuntu Linux is 10.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL...

5.5AI score
Exploits0References1
OpenVAS
OpenVAS
added 2018/05/15 12:0 a.m.40 views

Apple Mac OS X Multiple Vulnerabilities-03 (HT205375)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.1AI score0.02828EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/05/16 12:0 a.m.32 views

Apple Mac OS X Multiple Vulnerabilities - 01 - (HT207797)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.5AI score0.17644EPSS
Exploits8References1
Tenable Nessus
Tenable Nessus
added 2016/07/29 12:0 a.m.17 views

Mac OS X 10.9.x < 10.9.5 / 10.10.x < 10.10.5 / 10.11.x < 10.11.1 Multiple Vulnerabilities

Binary data 9437.prm...

9.8CVSS7.3AI score0.03085EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2015/08/17 12:0 a.m.227 views

Mac OS X 10.10.x < 10.10.5 Multiple Vulnerabilities

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.5. It is, therefore, affected by multiple vulnerabilities in the following components : - apache - apachemodphp - Apple ID OD Plug-in - AppleGraphicsControl - Bluetooth - bootp - CloudKit - CoreMedia Playback - CoreTe...

9.8CVSS7.6AI score0.78359EPSS
Exploits63References161
Tenable Nessus
Tenable Nessus
added 2015/04/10 12:0 a.m.146 views

Mac OS X 10.10.x < 10.10.3 Multiple Vulnerabilities (FREAK)

The remote host is running a version of Mac OS X 10.10.x that is prior to 10.10.3. It is, therefore, affected multiple vulnerabilities in the following components : - Admin Framework - Apache - ATS - Certificate Trust Policy - CFNetwork HTTPProtocol - CFNetwork Session - CFURL - CoreAnimation -...

10CVSS8.2AI score0.91945EPSS
Exploits59References82
OpenVAS
OpenVAS
added 2015/03/05 12:0 a.m.26 views

Apple Mac OS X Multiple Vulnerabilities -01 (Mar 2015)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS5.5AI score0.3542EPSS
Exploits9References4
Rows per page
Query Builder