Lucene search
+L

72482 matches found

OSV
OSV
added 2026/07/02 7:40 p.m.8 views

MINI-W673-C5G4-9VXF

Bulletin has no description...

8.7CVSS5.7AI score0.0063EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:39 p.m.13 views

MINI-VP8M-4V54-HHJJ

Bulletin has no description...

5.7AI score
SaveExploits0
Cvelist
Cvelist
added 2026/07/02 7:39 p.m.49 views

CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...

6CVSS0.0025EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/02 7:39 p.m.14 views

CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...

6CVSS5.9AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/02 7:39 p.m.11 views

CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...

6CVSS5.9AI score0.0025EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/02 7:39 p.m.47 views

CVE-2026-58580

LobeChat up to version 2.2.9 is affected by broken object-level authorization in MessageModel. An authenticated user who knows another user’s non-enumerable message identifier can overwrite that victim’s plugin tool‑call metadata, plugin state/error, and TTS/translation records via tRPC message p...

6CVSS5.8AI score0.0025EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/02 7:39 p.m.9 views

MINI-FC8Q-99CM-3C68

Bulletin has no description...

8.1CVSS5.7AI score0.01025EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:31 p.m.8 views

MINI-MWJW-JP43-4FQ4

Bulletin has no description...

3.5CVSS5.7AI score0.01082EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:27 p.m.9 views

MINI-M7VC-X936-JFH8

Bulletin has no description...

9.8CVSS5.7AI score0.00313EPSS
SaveExploits1
OSV
OSV
added 2026/07/02 7:26 p.m.8 views

MINI-999J-GMVQ-8GRQ

Bulletin has no description...

5.3CVSS5.7AI score0.00281EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.10 views

MINI-4GJ7-7387-3746

Bulletin has no description...

9.6CVSS5.7AI score0.00319EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.10 views

MINI-7552-GVRH-GV89

Bulletin has no description...

9.6CVSS5.7AI score0.00306EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.10 views

MINI-GJ96-RH7W-7J2R

Bulletin has no description...

8.8CVSS5.7AI score0.00383EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.11 views

MINI-65JP-P3P5-VH7Q

Bulletin has no description...

7.5CVSS5.7AI score0.00338EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.12 views

MINI-QCH6-4QQX-2FR9

Bulletin has no description...

7.8CVSS5.7AI score0.00109EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.9 views

MINI-4V3H-6XXF-WJ5P

Bulletin has no description...

7.5CVSS5.7AI score0.00338EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.9 views

MINI-QQW9-3R3Q-9XV3

Bulletin has no description...

4.2CVSS5.7AI score0.00198EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.7 views

MINI-X54Q-758H-6JGF

Bulletin has no description...

8.1CVSS5.7AI score0.00384EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.10 views

MINI-4PF9-HJX8-J7HC

Bulletin has no description...

10CVSS5.7AI score0.00319EPSS
SaveExploits0
OSV
OSV
added 2026/07/02 7:26 p.m.10 views

MINI-9239-94JQ-89WM

Bulletin has no description...

8.2CVSS5.7AI score0.00331EPSS
SaveExploits0
Rows per page
Query Builder