Lucene search
K

74 matches found

OSV
OSV
added 2026/02/26 4:27 p.m.5 views

GO-2026-4326 Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server

Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

6.8CVSS5.6AI score0.00274EPSS
Exploits0References6
CVE
CVE
added 2026/02/19 2:58 p.m.27 views

CVE-2025-71241

SPIP

6.1CVSS5.6AI score0.002EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/02/17 12:0 a.m.6 views

HPE Aruba Networking 5G Core server API 安全漏洞

The HPE Aruba Networking 5G Core Server API is a programming and management interface provided by the American company HPE. There are security vulnerabilities associated with the HPE Aruba Networking 5G Core Server API. These vulnerabilities stem from improper handling of API errors, which may...

6.5CVSS5.8AI score0.00326EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/01/16 12:30 p.m.8 views

Mattermost is vulnerable to DoS due to infinite re-renders on API errors

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

6.8CVSS6.8AI score0.00274EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added 2026/01/16 11:25 a.m.3 views

EUVD-2026-2916

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

6.8CVSS6.2AI score0.00274EPSS
Exploits0References6
Redos
Redos
added 2025/12/17 12:0 a.m.6 views

ROS-20251217-7310

A vulnerability in Mozilla Firefox and Firefox ESR browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

3.4CVSS6.5AI score0.00221EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.6 views

PT-2026-3244

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.8 Mattermost versions 11.1.x through 11.1.1 Mattermost versions 11.0.x through 11.0.6 Description The software contains a flaw that does not prevent infinite re-renders when API errors occur...

9.9CVSS5.2AI score0.27661EPSS
Exploits44References121
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2004-1693

Malware in sbrugna...

5CVSS6.4AI score0.08097EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2025/09/28 1:2 a.m.4 views

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

5.5CVSS7AI score0.00197EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.5 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

7.8CVSS7.8AI score0.00662EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.4 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. These vulnerabilities allow attackers to influence the integrity of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow an attacker to influence the integrity of protected information...

5CVSS6.8AI score0.00316EPSS
Exploits0References20Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/07 12:0 a.m.20 views

The vulnerability of the Mozilla Firefox browser, related to errors in information representation by the user interface, allows a hacker to replace the address bar.

The vulnerability of the Mozilla Firefox browser is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to substitute the address bar with a specially created link...

6.5CVSS5.9AI score0.00426EPSS
Exploits0References6Affected Software5
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2022-48883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to...

7.8CVSS5.9AI score0.0023EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/02/17 12:0 a.m.6 views

The vulnerability of the Microsoft Outlook for Android client, related to information representation errors in the user interface, allows a hacker to perform spear-phishing attacks.

The vulnerability of the Microsoft Outlook for Android client is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

5.3CVSS7.8AI score0.01063EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/10 12:0 a.m.3 views

The vulnerability of Documenso’s digital signature software lies in errors in the user interface’s information presentation, which allows attackers to perform spoofing attacks.

The vulnerability of Documenso’s digital signature software is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

6.3CVSS5.5AI score0.00204EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.5 views

The vulnerability of Microsoft Exchange Server servers, related to errors in information representation by the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Exchange Server servers is related to errors in information representation by the user interface. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...

7.8CVSS7.7AI score0.07748EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.4 views

PT-2024-7378 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions up to 129.0.2792.52 Description: A spoofing issue is present in Microsoft Edge, related to errors in user interface information representation. This could allow a remote attacker to conduct spoofing...

5CVSS6.8AI score0.00467EPSS
Exploits0References14
BDU FSTEC
BDU FSTEC
added 2024/08/26 12:0 a.m.3 views

The vulnerability of the Date Picker function in Mozilla Firefox and Firefox ESR browsers allows a malicious actor to provide arbitrary permissions and gain unauthorized access to data or functions.

The vulnerability of the Date Picker function in Mozilla Firefox and Firefox ESR browsers is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to provide arbitrary permissions and gain unauthorized access to data or function...

9.4CVSS7.2AI score0.00492EPSS
Exploits0References24Affected Software8
Redos
Redos
added 2024/08/20 12:0 a.m.35 views

ROS-20240820-01

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to the use of memory after its release. memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code using a specially crafted w...

8.4CVSS8.1AI score0.00971EPSS
Exploits3
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.3 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird involve information representation errors in the user interface, allowing attackers to obtain user permissions.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to information representation errors in the user interface. Exploiting these vulnerabilities can allow a remote attacker to obtain user permissions...

6.4CVSS6.5AI score0.00609EPSS
Exploits1References24Affected Software12
Rows per page
Query Builder