663 matches found
EUVD-2023-51489
Malicious code in bioql PyPI...
EUVD-2023-51485
Malicious code in bioql PyPI...
EUVD-2023-47717
Malicious code in bioql PyPI...
EUVD-2023-42799
Malicious code in bioql PyPI...
EUVD-2023-48359
Malicious code in bioql PyPI...
EUVD-2023-51486
Malicious code in bioql PyPI...
EUVD-2023-51490
Malicious code in bioql PyPI...
EUVD-2023-48353
Malicious code in bioql PyPI...
EUVD-2023-52209
Malicious code in bioql PyPI...
EUVD-2022-34671
Malicious code in bioql PyPI...
EUVD-2023-43435
Malicious code in bioql PyPI...
EUVD-2023-43436
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-39039
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. CVE-2023-39039 Note that...
Improper Access Control
github.com/mattermost/mattermost-plugin-confluence is vulnerable to Improper Access Control. The vulnerability is due to a failure to verify user access to a channel, which allows an attacker to retrieve channel subscription details without proper authorization via the API endpoint...
SUSE CVE-2025-53857
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint...
SUSE CVE-2025-53910
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint...
CVE-2025-49810 Thread summarization allows persistent access to channel
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
CVE-2025-49810 Thread summarization allows persistent access to channel
Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...
SUSE CVE-2025-8285
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint...
CVE-2025-8285
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint...