Lucene search
+L

79 matches found

Github Security Blog
Github Security Blog
added 2024/09/16 3:32 p.m.30 views

Mattermost Desktop App fails to sufficiently configure Electron Fuses

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

6.5CVSS6.8AI score0.00205EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/09/16 3:32 p.m.9 views

GHSA-XGQ9-7GW6-JR5R Mattermost Desktop App fails to sufficiently configure Electron Fuses

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS4.9AI score0.00205EPSS
SaveExploits0References3
NVD
NVD
added 2024/09/16 3:15 p.m.35 views

CVE-2024-45835

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

6.5CVSS0.00205EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/16 2:27 p.m.47 views

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS0.00205EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/16 2:27 p.m.58 views

CVE-2024-45835

Mattermost Desktop App

6.5CVSS4AI score0.00205EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/09/16 2:27 p.m.14 views

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS5.9AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/09/16 2:27 p.m.11 views

CVE-2024-45835 Insufficient Electron Fuses Configuration

Mattermost Desktop App versions =5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access...

2.5CVSS6.9AI score0.00205EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/16 12:0 a.m.15 views

PT-2024-31800 · Mattermost +1 · Mattermost Desktop App +1

Name of the Vulnerable Software and Affected Versions: Mattermost Desktop App versions =5.8.0 Description: The Mattermost Desktop App fails to sufficiently configure Electron Fuses, allowing an attacker to gather Chromium cookies or abuse other misconfigurations via remote or local access. This...

6.5CVSS6.4AI score0.00205EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2024/09/16 12:0 a.m.6 views

Mattermost Desktop App 安全漏洞

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A security vulnerability exists in Mattermost Desktop App version 5.8.0 and prior versions, which stems from a failure to adequately configure Electron Fuses.An attacker could use this vulnerability to collect Chromium...

6.5CVSS6.5AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/10 9:15 a.m.27 views

CVE-2024-8258

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

7.8CVSS0.00393EPSS
SaveExploits1References4
OSV
OSV
added 2024/09/10 9:15 a.m.12 views

CVE-2024-8258

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

7.8CVSS6.2AI score0.04333EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/09/10 8:36 a.m.43 views

CVE-2024-8258 Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

2CVSS8.2AI score0.00393EPSS
SaveExploits1References4
CVE
CVE
added 2024/09/10 8:36 a.m.140 views

CVE-2024-8258

CVE-2024-8258 affects Logitech Options Plus on macOS (v1.60.496306). The issue is due to improper control of generation of code in Electron Fuses, enabling arbitrary code execution via insecure Electron Fuses configuration (local attack vector, no user interaction; CVSS 3.1 base 7.8, high). Some ...

7.8CVSS7.9AI score0.00393EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/09/10 8:36 a.m.38 views

CVE-2024-8258 Insecure Electron Fuses in Logitech Options Plus Allowing Arbitrary Code Execution on macOS

Improper Control of Generation of Code 'Code Injection' in Electron Fuses in Logitech Options Plus version 1.60.496306 on macOS allows attackers to execute arbitrary code via insecure Electron Fuses configuration...

2CVSS0.00393EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.9 views

PT-2024-38895 · Logitech · Logitech Options Plus

Name of the Vulnerable Software and Affected Versions: Logitech Options Plus version 1.60.496306 Description: The issue is related to improper control of generation of code, also known as 'code injection', in Electron Fuses within Logitech Options Plus on macOS. This allows attackers to execute...

9.8CVSS8.6AI score0.04333EPSS
SaveExploits2References8
OSV
OSV
added 2024/03/23 10:15 p.m.6 views

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

8.8CVSS5.8AI score0.01051EPSS
SaveExploits0References4
NVD
NVD
added 2024/03/23 10:15 p.m.12 views

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

8.8CVSS7AI score0.01051EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/03/23 12:0 a.m.24 views

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

7.3AI score0.01051EPSS
SaveExploits0References4
CVE
CVE
added 2024/03/23 12:0 a.m.101 views

CVE-2024-23755

ClickUp Desktop prior to version 3.3.77 (macOS and Windows) is affected by a code injection vulnerability due to Electron Fuses, specifically inadequate protection around RunAsNode settings. The issue, described across multiple sources (NVD/Red Hat/CVE records and corroborating security portals),...

8.8CVSS7.2AI score0.01051EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/23 12:0 a.m.10 views

CVE-2024-23755

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode...

8.8AI score0.01051EPSS
SaveExploits0References4
Rows per page
Query Builder