26987 matches found
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication in the email update process. An attacker can retain a verified status on an account after changing the associated email address to one they do not control by updating the email without triggering a new verificati...
PYSEC-2026-2112
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save and then restored later with CookieJar.load lose their host-only status. This vulnerability is fixed in 3.14.1...
MINI-VCQC-Q43R-9CX2
Bulletin has no description...
CVE-2026-6653
creationtimestamp| type| source ---|---|--- 2026-06-22 16:30:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3movco6cnwk26 2026-07-08 12:00:55+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mq533bbiim2i 2026-07-10 12:01:08+00:00| seen|...
Incorrect Authorization
Overview github.com/mattermost/mattermost/server/v8/channels/api4 is a platform for secure collaboration across the entire software development lifecycle Affected versions of this package are vulnerable to Incorrect Authorization through the demote-user API process. An attacker can degrade bot...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through the demote-user API process. An attacker can degrade bot accounts to guest status without possessing bot-management permissions by targeting bot accounts as demotion targets. Remediation Upgrade...
CVE-2026-5139
creationtimestamp| type| source ---|---|--- 2026-06-22 15:54:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3movanaj4zd2t...
GHSA-G5VR-6PGG-74QV Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user management write access but no Integrations access to deactivate bot accounts via the PUT /api/v4/users/id/active API...
Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user management write access but no Integrations access to deactivate bot accounts via the PUT /api/v4/users/id/active API...
httpd: mod_md: unrestricted OCSP response leads to resource exhaustion
A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...
httpd: mod_md: unrestricted OCSP response leads to resource exhaustion
A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...
OPENSUSE-SU-2026:21020-1 Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062...
SUSE-SU-2026:22335-1 Security update for postfix
This update for postfix fixes the following issue - CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062...
MINI-WRJG-485M-87R3
Bulletin has no description...
CVE-2026-8074
Mattermost CVE-2026-8074 affects Mattermost versions 11.7.x (<=11.7.0) and 10.11.x (
CVE-2026-8074
Mattermost versions 11.7.x = 11.7.0, 10.11.x = 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user management write access but no Integrations access to deactivate bot accounts via the PUT /api/v4/users/id/active API...
Security update for postfix
This update for postfix fixes the following issue CVE-2026-43964: buffer overread and process crash via an enhanced status code that lacks text after the third number bsc1264062. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate o...
MINI-QFMJ-9VMJ-4M6V
Bulletin has no description...
CVE-2026-44914
Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges required, but framework authorization did not...