Lucene search
+L

2664 matches found

CNNVD
CNNVD
โ€ขadded 2025/04/15 12:00 a.m.โ€ข10 views

PeerTube ๅฎ‰ๅ…จๆผๆดž

PeerTube is a decentralized video sharing service platform open-sourced by Chocobozzz. It is used for producing video projects. PeerTube suffers from a security vulnerability that stems from a lack of permission validation, which could lead to adding playlists to other users' channels...

4.3CVSS6.5AI score0.00319EPSS
SaveExploits1References2
Snyk
Snyk
โ€ขadded 2025/04/14 9:30 a.m.โ€ข2 views

Incorrect Authorization

Overview github.com/mattermost/mattermost/server/channels/app is a private-cloud Slack alternative Affected versions of this package are vulnerable to Incorrect Authorization in that a user with the "Edit Other Users" permission set, but not broader high-level permissions, can modify the properti...

5.1CVSS6.8AI score0.00242EPSS
SaveExploits0References2
Snyk
Snyk
โ€ขadded 2025/04/14 9:30 a.m.โ€ข1 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in that a user with the "Edit Other Users" permission set, but not broader high-level permissions, can modify the properties of admin accounts. Remediation Upgrade...

5.1CVSS6.8AI score0.00242EPSS
SaveExploits0References2
Kitploit
Kitploit
โ€ขadded 2025/04/11 12:30 p.m.โ€ข345 views

Telegram-Scraper - A Powerful Python Script That Allows You To Scrape Messages And Media From Telegram Channels Using The Telethon Library

A powerful Python script that allows you to scrape messages and media from Telegram channels using the Telethon library. Features include real-time continuous scraping, media downloading, and data export capabilities. \ / / / / | | / \ \ \ | | \ \ / \ || \ / / / / Features ๐Ÿš€ Scrape messages...

7.1AI score
SaveExploits0References1
NVD
NVD
โ€ขadded 2025/04/09 5:15 p.m.โ€ข14 views

CVE-2025-31377

Missing Authorization vulnerability in Asaquzzaman mishu Woo Product Feed For Marketing Channels woocommerce-to-google-merchant-center allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Product Feed For Marketing Channels: from n/a through = 1.9.0...

7.5CVSS0.00691EPSS
SaveExploits0References1
CVE
CVE
โ€ขadded 2025/04/09 4:10 p.m.โ€ข63 views

CVE-2025-31377

CVE-2025-31377 : Missing Authorization in the WordPress plugin Woo Product Feed For Marketing Channels (versions up to 1.9.0) allows exploitation of access control weakness (vector not detailed in provided data). CVSS 3.1: Network attack, Low complexity, No privileges required, UI not required, A...

7.5CVSS7.2AI score0.00691EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
โ€ขadded 2025/04/09 10:53 a.m.โ€ข36 views

CVE-2024-45549

Information disclosure while creating MQ channels...

7.7CVSS6.9AI score0.0012EPSS
SaveExploits0
CNNVD
CNNVD
โ€ขadded 2025/04/09 12:00 a.m.โ€ข11 views

WordPress plugin Woo Product Feed For Marketing Channels ๅฎ‰ๅ…จๆผๆดž

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...

7.5CVSS7.7AI score0.00691EPSS
SaveExploits0References1
Debian CVE
Debian CVE
โ€ขadded 2025/04/07 8:09 p.m.โ€ข58 views

CVE-2025-29769

libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't...

8.5CVSS6.7AI score0.00283EPSS
SaveExploits1
SUSE Linux
SUSE Linux
โ€ขadded 2025/04/07 4:08 p.m.โ€ข9 views

Security update for xen

This update for xen fixes the following issues: CVE-2025-1713: Fixed potential deadlock with VT-d and legacy PCI device pass-through bsc1238043 Other fixes: Xen channels and domU console bsc1219354 Fixed attempting to start guest vm's libxl fills disk with errors bsc1237692 Xen call trace and API...

6.8CVSS7.4AI score0.00723EPSS
SaveExploits0References12
NVD
NVD
โ€ขadded 2025/04/07 11:15 a.m.โ€ข14 views

CVE-2024-45549

Information disclosure while creating MQ channels...

7.7CVSS0.0012EPSS
SaveExploits0References1
Cvelist
Cvelist
โ€ขadded 2025/04/07 10:15 a.m.โ€ข26 views

CVE-2024-45549 Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Information disclosure while creating MQ channels...

7.7CVSS0.0012EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
โ€ขadded 2025/04/07 10:15 a.m.โ€ข12 views

CVE-2024-45549 Exposure of Sensitive System Information to an Unauthorized Control Sphere in KERNEL

Information disclosure while creating MQ channels...

7.7CVSS7.7AI score0.0012EPSS
SaveExploits0References1
Veracode
Veracode
โ€ขadded 2025/04/07 7:17 a.m.โ€ข12 views

Missing Encryption Of Sensitive Data

org.opendaylight.sfc, odl-sfc-openflow-renderer is vulnerable to Missing Encryption of Sensitive Data. The vulnerability is due to missing security attributes or transmission over unencrypted channels, allowing Man-in-the-Middle attacks to access sensitive information...

8.1CVSS7AI score0.00213EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
โ€ขadded 2025/04/07 12:00 a.m.โ€ข12 views

Qualcomm Chipsets ๅฎ‰ๅ…จๆผๆดž

Qualcomm Chipsets are a family of chipsets from Qualcomm, an American company. A security vulnerability exists in Qualcomm Chipsets that stems from a possible information leak when creating MQ channels...

7.7CVSS6.5AI score0.0012EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
โ€ขadded 2025/04/07 12:00 a.m.โ€ข16 views

The vulnerability of the Ruby interpreter, related to the use of hidden time channels for data transmission, allows an attacker to execute the Marvin attack.

The vulnerability of the Ruby interpreter lies in the use of hidden time channels for data transmission. Exploiting this vulnerability allows a remote attacker to execute the Marvin attack...

7.4CVSS7.3AI score0.00649EPSS
SaveExploits0References7Affected Software10
OSV
OSV
โ€ขadded 2025/04/03 7:19 a.m.โ€ข14 views

CVE-2025-22006 net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence Registering the interrupts for TX or RX DMA Channels prior to registering their respective NAPI callbacks can result in a NULL pointer dereference. This is seen in...

5.5CVSS5.7AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
โ€ขadded 2025/04/03 12:00 a.m.โ€ข11 views

PT-2025-14599 ยท Linuxย +1 ยท Linux Kernelย +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the am65-cpsw driver. The issue occurs when registering interrupts for TX or RX DMA channels before registering...

5.5CVSS5.9AI score0.00186EPSS
SaveExploits0References15
Veracode
Veracode
โ€ขadded 2025/04/01 1:56 p.m.โ€ข15 views

Incorrect Authorization

Mattermost is vulnerable to Incorrect Authorization. The vulnerability is due to improper restriction of command execution due to a flaw that allows authenticated users to run commands in archived channels...

8.8CVSS7.2AI score0.00373EPSS
SaveExploits0References3Affected Software2
Veracode
Veracode
โ€ขadded 2025/04/01 12:52 p.m.โ€ข7 views

Incorrect Authorization

Mattermost is vulnerable to Incorrect Authorization. The vulnerability is due to a flaw that allows authenticated users to create or update bookmarks in archived channels...

4.3CVSS5.1AI score0.00229EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder