41023 matches found
Mattermost Uncontrolled Resource Consumption DoS
The vulnerability of the Mattermost instant messaging application is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially crafted DOC file...
Google Chrome PDF DoS
The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created PDF file...
CVE-2026-42889
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
CVE-2026-42889
Summary (CVE-2026-42889): Relay Server (used with Obsidian) versions 0.9.0–0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were treated as having full server permissions, all...
CVE-2026-42889 Relay Server WebSocket authentication bypass when token is omitted
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
CVE-2026-42889 Relay Server WebSocket authentication bypass when token is omitted
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
CVE-2026-42889
Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6 contain an authentication bypass in the multi-document WebSocket endpoints. When authentication is configured, WebSocket connections without a token query parameter were incorrectly treated as having full...
MINI-4H23-67GQ-XPVW
Bulletin has no description...
MINI-3XGC-53CX-FF5F
Bulletin has no description...
MINI-3Q3M-F8VH-FCC8
Bulletin has no description...
10minions-engine (>=0.0.1, <=0.0.4), @1amageek/document-propagator (>=0.10.1, <=1.0.0) +1525 more potentially affected by CVE-2026-44295 via protobufjs-cli (>=1.0.0, <=1.1.3)
protobufjs-cli NPM version =1.0.0, =0.0.1, =0.10.1, =1.1.0, =0.4.0, =1.22.0, =6.2.36, =1.0.0-alpha.2, =1.8.0, =0.0.0-beta.0, =1.0.0, =1.0.1, =3.1.0 and more Source cves: CVE-2026-44295 Source advisory: GHSA-6R35-46G8-JCW9...
Logged-in user bypasses share password and download restrictions on Text attachments via documentId
None...
MINI-W737-RP7H-6X4Q
Bulletin has no description...
MINI-VW74-24FX-VMMF
Bulletin has no description...
MINI-V3QQ-HQPF-8V99
Bulletin has no description...
MINI-PQ2M-J5PR-C4QM
Bulletin has no description...
MINI-3673-3WXJ-CWPM
Bulletin has no description...
MINI-8HWM-VGV3-4957
Bulletin has no description...