6735 matches found
CVE-2025-11414 affecting package binutils for versions less than 2.41-10
CVE-2025-11414 affecting package binutils for versions less than 2.41-10. A patched version of the package is available...
CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39947 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39934 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39934 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39914 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-39902 affecting package kernel for versions less than 6.6.112.1-1
CVE-2025-39902 affecting package kernel for versions less than 6.6.112.1-1. A patched version of the package is available...
CVE-2025-41436
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
CVE-2025-55070 Lack of MFA enforcement in WebSocket connections
Mattermost versions 11 fail to enforce multi-factor authentication on WebSocket connections which allows unauthenticated users to access sensitive information via WebSocket events...
CVE-2025-41436 Unauthorized access to archived channel content via threads interface
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
CVE-2025-11776 Guest user can discover archived public channels
Mattermost versions 11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the /api/v4/teams/teamid/channels/searcharchived endpoint...
CVE-2025-11776
Mattermost CVE-2025-11776 affects Mattermost Server versions earlier than 11.0.0. A flaw in access control on the archived channel search API (/api/v4/teams/{team_id}/channels/search_archived) allows guest users to discover archived public channels. Root cause: insufficient restrictions on archiv...
WordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Select Core versions 2.6...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libssh (UTSA-2025-990927)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990927 advisory. A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect comparison...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libssh (UTSA-2025-990914)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990914 advisory. A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible for key derivation. Due to inconsiste...
AZL-70328 CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
AZL-70343 CVE-2025-47913 affecting package telegraf for versions less than 1.31.0-11
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Notifications component...
firefox: thunderbird: Same-origin policy bypass in the DOM: Notifications component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Notifications component...
CVE-2025-54983
A health check port on Zscaler Client Connector on Windows, versions 4.6 4.6.0.216 and 4.7 4.7.0.47, which under specific circumstances was not released after use, allowed traffic to potentially bypass ZCC forwarding controls...
