Lucene search
K

9 matches found

Veracode
Veracode
added 2026/02/02 7:14 a.m.3 views

Improper Access Control

github.com/slackhq/nebula is vulnerable to Improper Access Control. The vulnerability is due to incorrect handling of CIDR ranges in certain configurations, which allows an attacker to spoof or use arbitrary source IP addresses within the Nebula network...

4.9CVSS5.7AI score0.00045EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2025/10/23 6:31 a.m.5 views

Slack Nebula may accept arbitrary source IP addresses

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS7.1AI score0.00045EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2025/10/23 6:31 a.m.1 views

GHSA-X6FH-7QMF-69XH Slack Nebula may accept arbitrary source IP addresses

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS7.1AI score0.00045EPSS
Exploits0References5
NVD
NVD
added 2025/10/23 4:18 a.m.3 views

CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS0.00045EPSS
Exploits0References2
CVE
CVE
added 2025/10/23 12:0 a.m.6 views

CVE-2025-62820

Slack Nebula prior to 1.9.7 is affected by a CIDR handling issue that allows accepting arbitrary source IPs within the Nebula network. The CVE entry documents this as a network‑level vulnerability with a CVSS v3.1 base score of 4.9 (Medium) and a high attack complexity, requiring low privileges a...

4.9CVSS6.7AI score0.00045EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/23 12:0 a.m.9 views

CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS0.00045EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/23 12:0 a.m.3 views

CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS6.7AI score0.00045EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/23 12:0 a.m.2 views

EUVD-2025-35657

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

4.9CVSS6.5AI score0.00045EPSS
Exploits0References4
CNVD
CNVD
added 2020/12/28 12:0 a.m.1 views

SQL Injection Vulnerability in Graduation Design Sampling and Guidance Management System of Hunan Nebula Network Information Technology Co.

Hunan Nebula Network Information Technology Co., Ltd. was founded in 2016, the company is rooted in the field of higher education, especially higher vocational education in Hunan Province. A SQL injection vulnerability exists in the graduation design sampling and guidance management system of Hun...

7.5AI score
Exploits0
Rows per page
Query Builder