Lucene search
+L

490 matches found

OSV
OSV
added 2025/02/24 7:23 a.m.2 views

CVE-2025-24526 Channel export permitted on archived channel when viewing archived channels is disabled

Mattermost versions 10.1.x = 10.1.3, 10.4.x = 10.4.1, 9.11.x = 9.11.7, 10.3.x = 10.3.2, 10.2.x = 10.2.2 fail to restrict channel export of archived channels when the "Allow users to view archived channels" is disabled which allows a user to export channel contents when they shouldn't have access ...

4.3CVSS6AI score0.00283EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/02/24 12:0 a.m.6 views

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost that stems from a failure to properly restrict the export of archived channels, resulting in users being able to export content...

4.3CVSS6.3AI score0.00283EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/21 12:0 p.m.5 views

RUSTSEC-2025-0013 resolve is unmaintained

resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...

7.2AI score
SaveExploits0References3
RustSec
RustSec
added 2025/02/21 12:0 p.m.9 views

resolve is unmaintained

resolve crate's GitHub repository is archived with no commits for seven years. Latest crates.io release is also seven years old. Possible alternatives hickory-resolver...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/02/21 12:0 a.m.5 views

PT-2025-10140 · Crates.Io · Resolve

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The software's GitHub repository has been archived with no commits for seven years, and the latest release on crates.io is also seven years old. Recommendations: At the moment, there is no...

7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/02/04 11:35 p.m.19 views

CVE-2024-48878

Zohocorp ManageEngine ADManager Plus versions 7241 and prior are vulnerable to SQL Injection in Archived Audit Report...

8.8CVSS8.1AI score0.015EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/01/23 12:0 a.m.33 views

7-Zip < 24.09 (ZDI-25-045)

The version of 7-Zip installed on the remote host is prior to 24.09. It is, therefore, affected by a vulnerability as referenced in the ZDI-25-045 advisory. - The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-We...

7CVSS7.6AI score0.67071EPSS
SaveExploits8References2
OSV
OSV
added 2025/01/13 12:0 p.m.4 views

RUSTSEC-2025-0026 registry is unmaintained

The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives windows-registry...

7.2AI score
SaveExploits0References3
RustSec
RustSec
added 2025/01/13 12:0 p.m.7 views

registry is unmaintained

The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives windows-registry...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/13 12:0 a.m.2 views

PT-2025-19691 · Crates.Io · Registry

The author has archived the GitHub repository and mentions deprecation in project's README. Possible alternatives windows-registry...

7.3AI score
SaveExploits0References4
Circl
Circl
added 2024/12/13 2:44 p.m.10 views

CVE-2022-45840

creationtimestamp| type| source ---|---|--- 2024-12-13 14:44:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113646046678252815...

6.5CVSS6.9AI score0.00637EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2024/12/12 6:58 a.m.5 views

SUSE CVE-2024-53862

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...

7.5CVSS7.1AI score0.00656EPSS
SaveExploits1References3
OSV
OSV
added 2024/12/09 12:0 p.m.7 views

RUSTSEC-2024-0422 gtk-layer-shell GTK3 bindings - no longer maintained

The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...

7.1AI score
SaveExploits0References3
OSV
OSV
added 2024/12/09 12:0 p.m.7 views

RUSTSEC-2024-0423 gtk-layer-shell-sys GTK3 bindings - no longer maintained

The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...

7.1AI score
SaveExploits0References3
RustSec
RustSec
added 2024/12/09 12:0 p.m.8 views

gtk-layer-shell-sys GTK3 bindings - no longer maintained

The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...

7.1AI score
SaveExploits0
RustSec
RustSec
added 2024/12/09 12:0 p.m.10 views

gtk-layer-shell GTK3 bindings - no longer maintained

The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository, and added a note to the crate description and its README.md that the crates are no longer maintained. Please take a look at gtk4-layer-shell instead...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.6 views

PT-2024-40966 · Unknown · Gtk-Layer-Shell-Sys

Name of the Vulnerable Software and Affected Versions: gtk-layer-shell-sys affected versions not specified Description: The gtk-layer-shell-sys GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that the...

6.9AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.8 views

PT-2024-40965 · Unknown · Gtk-Layer-Shell

Name of the Vulnerable Software and Affected Versions: gtk-layer-shell versions affected versions not specified Description: The gtk-layer-shell GTK3 bindings are no longer maintained. The maintainers have archived the repository and added a note to the crate description and its README.md that th...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2024/12/02 8:6 p.m.23 views

GO-2024-3303 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows

Argo Workflows Allows Access to Archived Workflows with Fake Token in client mode in github.com/argoproj/argo-workflows...

7.5CVSS5.1AI score0.00656EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/12/02 4:8 p.m.46 views

CVE-2024-53862 Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. When using --auth-mode=client, Archived Workflows can be retrieved with a fake or spoofed token via the GET Workflow endpoint: /api/v1/workflows/namespace/name or when using...

6.3CVSS0.00656EPSS
SaveExploits1References2
Rows per page
Query Builder