490 matches found
CVE-2025-24526 Channel export permitted on archived channel when viewing archived channels is disabled
Mattermost versions 10.1.x = 10.1.3, 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to restrict channel export of archived channels when the "Allow users to view archived channels" is disabled which allows a user to export channel contents when they shouldn't have access ...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from a failure to properly restrict the export of archived channels, resulting in users being able to export content...
RUSTSEC-2025-0013 resolve is unmaintained
resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...
resolve is unmaintained
resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...
PT-2025-10140 · Crates.Io · Resolve
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The software's GitHub repository has been archived with no commits for seven years, and the latest release on crates.io is also seven years old. Recommendations: At the moment, there is no...
CVE-2024-48878
Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...
7-Zip < 24.09 (ZDI-25-045)
The version of 7-Zip installed on the remote host is prior to 24.09. It is, therefore, affected by a vulnerability as referenced in the ZDI-25-045 advisory. - The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-We...
RUSTSEC-2025-0026 registry is unmaintained
The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives windows-registry...
registry is unmaintained
The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives windows-registry...
PT-2025-19691 · Crates.Io · Registry
The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives windows-registry...
CVE-2022-45840
creationtimestamp| type| source ---|---|--- 2024-12-13 14:44:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113646046678252815...
SUSE CVE-2024-53862
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...
RUSTSEC-2024-0422 gtk-layer-shell GTK3 bindings - no longer maintained
The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...
RUSTSEC-2024-0423 gtk-layer-shell-sys GTK3 bindings - no longer maintained
The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...
gtk-layer-shell-sys GTK3 bindings - no longer maintained
The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...
gtk-layer-shell GTK3 bindings - no longer maintained
The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...
PT-2024-40966 · Unknown · Gtk-Layer-Shell-Sys
Name of the Vulnerable Software and Affected Versions: gtk-layer-shell-sys affected versions not specified Description: The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that the...
PT-2024-40965 · Unknown · Gtk-Layer-Shell
Name of the Vulnerable Software and Affected Versions: gtk-layer-shell versions affected versions not specified Description: The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that th...
GO-2024-3303 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
Argo Workflows Allows Access to Archived Workflows with Fake Token in client mode in github.com/argoproj/argo-workflows...
CVE-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...