Lucene search
K

30 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:39 a.m.5 views

CVE-2022-35921

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

4.3CVSS6.9AI score0.00168EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2019-16850

Malware in sbrugna...

7.5CVSS7.4AI score0.00308EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-6494

Malicious code in bioql PyPI...

4.3CVSS4.8AI score0.00168EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/08/26 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2019-7306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames an...

7.5CVSS7.1AI score0.00308EPSS
Exploits1References3
NVD
NVD
added 2023/01/11 8:15 p.m.11 views

CVE-2023-22487

Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extension, users can mention any post ID on the forum with the special @""p syntax. The following behavior never changes no matter if the actor should be able to read the mentioned post...

7.7CVSS7.4AI score0.00207EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/01/11 12:0 a.m.1 views

Flarum 访问控制错误漏洞

Flarum is an open source forum system for the Flarum community. An access control error vulnerability exists in flarum mention versions prior to 1.6.3, which stems from allowing the disclosure of all posts in the forum database, including posts awaiting approval, posts in tags to which the user...

7.7CVSS6.1AI score0.00207EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.13 views

Ubuntu: Security Advisory (USN-5234-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.00308EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2022/08/06 5:20 a.m.24 views

Byobu user preference to prevent private discussions being started are not respected

Impact Users electing to prevent others starting private discussions with themselves. Please note that admins and others with appropriate permissions can always bypass this preference, as was the case before. Patches Users of Byobu should update the extension to version 1.1.7, where this has been...

4.3CVSS5.1AI score0.00168EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/08/06 5:20 a.m.25 views

GHSA-6GJM-6WJ6-4PX5 Byobu user preference to prevent private discussions being started are not respected

Impact Users electing to prevent others starting private discussions with themselves. Please note that admins and others with appropriate permissions can always bypass this preference, as was the case before. Patches Users of Byobu should update the extension to version 1.1.7, where this has been...

3.5CVSS4.3AI score0.00168EPSS
Exploits0References4
Veracode
Veracode
added 2022/08/02 6:3 a.m.23 views

Leakage Of Private Discussion

fof/byobu is vulnerable to leakage of private discussion. Lack of enforcement of disablement to private discussion allows forum's users to start private discussions with themselves...

4.3CVSS5.1AI score0.00168EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2022/08/01 10:15 p.m.10 views

CVE-2022-35921

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

4.3CVSS0.00168EPSS
Exploits0References2
Prion
Prion
added 2022/08/01 10:15 p.m.8 views

Design/Logic Flaw

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

4CVSS4.7AI score0.00168EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/08/01 9:50 p.m.11 views

CVE-2022-35921 User preference to prevent private discussions not respected in fof/byobu

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

3.5CVSS5AI score0.00168EPSS
Exploits0References2
OSV
OSV
added 2022/08/01 9:50 p.m.6 views

CVE-2022-35921 User preference to prevent private discussions not respected in fof/byobu

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

3.5CVSS4.8AI score0.00168EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2022/08/01 9:50 p.m.5 views

CVE-2022-35921 User preference to prevent private discussions not respected in fof/byobu

fof/byobu is a private discussions extension for Flarum forum. Affected versions were found to not respect private discussion disablement by users. Users of Byobu should update the extension to version 1.1.7, where this has been patched. Users of Byobu with Flarum 1.0 or 1.1 should upgrade to...

3.5CVSS4.7AI score0.00168EPSS
Exploits0References2
CVE
CVE
added 2022/08/01 9:50 p.m.73 views

CVE-2022-35921

fof/byobu is a private discussions extension for Flarum. The issue: private discussion disablement is not respected, risking leakage of private discussions. A patch exists in version 1.1.7, and users of Byobu with Flarum 1.0 or 1.1 should upgrade to Flarum 1.2 or later, or disable the extension i...

4.3CVSS4.3AI score0.00168EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/08/01 12:0 a.m.1 views

Flarum 安全漏洞

Flarum is an open source forum system for the Flarum community. A security vulnerability exists in Flarum's Byobu extension prior to version 1.1.7, which stems from the fact that Byobu is a private discussion extension for the Flarum forums, and the affected version was found to not allow private...

4.3CVSS5AI score0.00168EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/08/01 12:0 a.m.2 views

PT-2022-23027 · Flarum +2 · Flarum +2

Name of the Vulnerable Software and Affected Versions: fof/byobu versions prior to 1.1.7 Description: The issue concerns the fof/byobu private discussions extension for Flarum forum, where affected versions do not respect private discussion disablement by users. This means users who have chosen t...

4.3CVSS4.5AI score0.00168EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2022/01/19 12:0 a.m.25 views

Ubuntu 16.04 ESM : Byobu vulnerability (USN-5234-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5234-1 advisory. Sander Bos discovered that Byobu incorrectly handled certain Apport data. An attacker could possibly use this issue to expose sensitive information. Tenable has...

7.5CVSS7.4AI score0.00308EPSS
Exploits1References2
OSV
OSV
added 2022/01/18 6:29 p.m.0 views

USN-5234-1 byobu vulnerability

Sander Bos discovered that Byobu incorrectly handled certain Apport data. An attacker could possibly use this issue to expose sensitive information...

7.5CVSS5.8AI score0.00308EPSS
Exploits1References2
Rows per page
Query Builder