Lucene search
K

6 matches found

OSV
OSV
added 2026/03/03 1:29 p.m.1 views

BIT-DISCOURSE-2026-27150 Discourse doesn't ensure guardian check when creating QueryGroupBookmark

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

5.3CVSS6AI score0.00047EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/26 7:55 p.m.3 views

EUVD-2026-8889

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

5.3CVSS5.5AI score0.00047EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/26 7:55 p.m.2 views

CVE-2026-27150

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

5.3CVSS5.8AI score0.00047EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/26 7:55 p.m.0 views

CVE-2026-27150 Discourse doesn't ensure guardian check when creating QueryGroupBookmark

Discourse is an open source discussion platform. Prior to versions 2025.12.2, 2026.1.1, and 2026.2.0, missing validatebeforecreate authorization in Data Explorer's QueryGroupBookmarkable allows any logged-in user to create bookmarks for query groups they don't have access to, enabling metadata...

5.3CVSS6AI score0.00047EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.2 views

PT-2026-22185

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2025.12.2 Discourse versions prior to 2026.1.1 Discourse versions prior to 2026.2.0 Description A missing validate before create authorization check in the Data Explorer's QueryGroupBookmarkable component allows any...

5.3CVSS5.9AI score0.00047EPSS
Exploits0References7
OSV
OSV
added 2024/11/08 6:15 a.m.2 views

DEBIAN-CVE-2024-50182

In the Linux kernel, the following vulnerability has been resolved: secretmem: disable memfdsecret if arch cannot set direct map Return -ENOSYS from memfdsecret syscall if !cansetdirectmap. This is the case for example on some arm64 configurations, where marking 4k PTEs in the direct map not...

5.5CVSS5.8AI score0.00012EPSS
Exploits0References1
Rows per page
Query Builder