Lucene search
+L

24612 matches found

Circl
Circl
added 2026/04/15 5:14 p.m.16 views

CVE-2026-23772

creationtimestamp| type| source ---|---|--- 2026-04-15 17:14:00+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116409843068495690 2026-04-16 11:16:12+00:00| seen| Telegram/j-zpZhFSipqPFVaOoufvpDRNhg2whahduAHfYT4AdF4gH4...

7.3CVSS5.3AI score0.00122EPSS
SaveExploits0References1
NVD
NVD
added 2026/04/15 11:16 a.m.12 views

CVE-2026-27769

Mattermost versions 10.11.x = 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API...

2.7CVSS0.00167EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/15 10:11 a.m.35 views

CVE-2026-27769 Connected Workspaces: Malicious remote server can manipulate arbitrary user's status

Mattermost versions 10.11.x = 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API...

2.7CVSS0.00167EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/15 10:11 a.m.9 views

CVE-2026-27769 Connected Workspaces: Malicious remote server can manipulate arbitrary user's status

Mattermost versions 10.11.x = 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API...

2.7CVSS5.8AI score0.00167EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/15 10:11 a.m.9 views

CVE-2026-27769 Connected Workspaces: Malicious remote server can manipulate arbitrary user's status

Mattermost versions 10.11.x = 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API...

2.7CVSS6AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/15 10:11 a.m.20 views

CVE-2026-27769

Mattermost versions 10.11.x = 10.11.12 fail to validate whether users were correctly owned by the correct Connected Workspace which allows a malicious remote server connected using the Conntexted Workspaces feature to change the displayed status of local users via the Connected Workspaces API...

2.7CVSS5.8AI score0.00167EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/04/15 10:11 a.m.30 views

CVE-2026-27769

Mattermost CVE-2026-27769 affects Mattermost 10.11.x up to 10.11.12 where the Connected Workspaces feature does not validate that users are correctly owned by the target Connected Workspace. This allows a malicious remote server connected via the Connected Workspaces API to change the displayed s...

2.7CVSS5.8AI score0.00167EPSS
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2026/04/15 8:35 a.m.9 views

SUSE CVE-2026-3842

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpuphysicalmemorymap returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in...

5.1CVSS7.1AI score0.00121EPSS
SaveExploits0References8
Circl
Circl
added 2026/04/15 4:31 a.m.8 views

CVE-2026-40090

creationtimestamp| type| source ---|---|--- 2026-04-15 04:31:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjj2rvphkr2z 2026-04-17 17:30:37+00:00| published-proof-of-concept| Telegram/99IlCPIS9qBv42yzAhiUHqlKgiNRb4WP8dx5pH1uskzhuw...

7.1CVSS4.9AI score0.0032EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/04/15 3:37 a.m.11 views

WordPress Nexi XPay plugin <= 8.3.0 - Missing Authorization to Unauthenticated Order Status Modification vulnerability

Missing Authorization to Unauthenticated Order Status Modification vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan - Knight Squad in WordPress Plugin Nexi XPay versions = 8.3.0...

5.3CVSS5.8AI score0.00189EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2026/04/15 2:43 a.m.8 views

GSD-2020-2021

creationtimestamp| type| source ---|---|--- 2026-04-15 02:43:43+00:00| seen| https://bsky.app/profile/installbasebot.bsky.social/post/3mjiurlrfns2k...

5.7AI score
SaveExploits0References1
Circl
Circl
added 2026/04/15 1:19 a.m.7 views

GHSA-J2HF-X4Q5-47J3

creationtimestamp| type| source ---|---|--- 2026-04-15 01:19:29+00:00| seen| Telegram/4QaIVP4Z6j7I04jn6w3qCKrQ76Fz4EXtpUCBPkRfgX1dqr4...

4.8AI score
SaveExploits0
Circl
Circl
added 2026/04/15 1:19 a.m.10 views

CVE-2026-27295

creationtimestamp| type| source ---|---|--- 2026-04-15 01:19:06+00:00| seen| Telegram/dGt1m22sw1SGsA9Eug0OSHT5OJOK3joaNLENVhZetMIBpOs 2026-04-15 11:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjjqka4vjs2u 2026-04-15 23:07:07+00:00| seen|...

7.8CVSS4.9AI score0.00154EPSS
SaveExploits0References2
Circl
Circl
added 2026/04/15 12:49 a.m.8 views

CVE-2026-35032

creationtimestamp| type| source ---|---|--- 2026-04-15 00:49:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjiofpiwpc2a 2026-04-15 01:19:29+00:00| seen| Telegram/4QaIVP4Z6j7I04jn6w3qCKrQ76Fz4EXtpUCBPkRfgX1dqr4...

8.6CVSS4.8AI score0.00312EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.16 views

Mattermost 安全漏洞

Mattermost is an open-source collaboration platform developed by the American company Mattermost. Versions of Mattermost such as 10.11.12 and earlier, including 10.11.x, have security vulnerabilities. These vulnerabilities stem from unvalidated user ownership, which could allow malicious remote...

2.7CVSS5.9AI score0.00167EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/15 12:0 a.m.20 views

PT-2026-33036

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.12 Description Improper validation of user ownership within the Connected Workspaces feature allows a malicious remote server to change the displayed status of local users via the Connected Workspaces...

4CVSS5.8AI score0.00167EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/15 12:0 a.m.17 views

Fedora 42 : webkitgtk (2026-36594550b0)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-36594550b0 advisory. Update to 2.52.1. Notable changes from 2.50 to 2.52: Make text look like in other browsers by blending in linear color space. Improved rendering...

8.8CVSS7AI score0.00961EPSS
SaveExploits2References19
Tenable Nessus
Tenable Nessus
added 2026/04/15 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-6317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security...

8.8CVSS7.2AI score0.00341EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/15 12:0 a.m.19 views

Tripp Lite Active Devices Detection

The current plugin identifies Tripp Lite devices that are still under active support. Tripp Lite Lifecycle Statuses: - Active: Product is currently available and supported. - Discontinued: Product no longer manufactured or procured. %NASLMINLEVEL 80900 C Tenable Network Security, Inc...

5.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/15 12:0 a.m.6 views

Tripp Lite Discontinued Devices Detection

The current plugin identifies Tripp Lite devices that are currently discontinued. Tripp Lite Lifecycle Statuses: - Active: Product is currently available and supported. - Discontinued: Product no longer manufactured or procured. %NASLMINLEVEL 80900 C Tenable Network Security, Inc...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder