Lucene search
K

7 matches found

CVE
CVE
added 2026/03/09 9:17 p.m.5 views

CVE-2026-28431

Misskey (open source federated social media) versions 8.45.0–before 2026.3.1 are affected by insufficient authorization checks and input validation, allowing data access beyond intended permissions irrespective of federation. Impact can include data exposure; CVSS vector indicates high impact to ...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2026/03/09 9:17 p.m.0 views

CVE-2026-28431 Misskey lacks proper authorization checks and input validation

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/03/09 9:17 p.m.0 views

CVE-2026-28431 Misskey lacks proper authorization checks and input validation

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/09 9:17 p.m.1 views

EUVD-2026-10366

Misskey is an open source, federated social media platform. All Misskey servers running versions 8.45.0 and later, but prior to 2026.3.1, contain a vulnerability that allows bad actors access to data that they ordinarily wouldn't be able to access due to insufficient permission checks and proper...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/09 12:0 a.m.1 views

PT-2026-24120

Name of the Vulnerable Software and Affected Versions Misskey versions 8.45.0 through 2026.3.0 Description Misskey, an open source, federated social media platform, has an issue where insufficient permission checks and proper input validation can allow unauthorized access to data. This can occur...

9.2CVSS5.8AI score0.0005EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/23 6:55 a.m.4 views

CVE-2024-49687

Missing Authorization vulnerability in storeapps Smart Manager smart-manager-for-wp-e-commerce.This issue affects Smart Manager: from n/a through = 8.45.0...

4.3CVSS5.9AI score0.00113EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/31 12:0 a.m.1 views

WordPress plugin Smart Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.3CVSS6.5AI score0.00113EPSS
Exploits0References1
Rows per page
Query Builder