Lucene search
K

29 matches found

OSV
OSV
added 2026/02/26 4:27 p.m.5 views

GO-2026-4326 Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server

Mattermost is vulnerable to DoS due to infinite re-renders on API errors in github.com/mattermost/mattermost-server. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive...

6.8CVSS5.6AI score0.00021EPSS
Exploits0References6
CVE
CVE
added 2026/02/19 2:58 p.m.9 views

CVE-2025-71241

SPIP

6.1CVSS5.6AI score0.00044EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/02/17 12:0 a.m.3 views

HPE Aruba Networking 5G Core server API 安全漏洞

The HPE Aruba Networking 5G Core Server API is a programming and management interface provided by the American company HPE. There are security vulnerabilities associated with the HPE Aruba Networking 5G Core Server API. These vulnerabilities stem from improper handling of API errors, which may...

6.5CVSS5.8AI score0.00022EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/01/16 12:30 p.m.8 views

Mattermost is vulnerable to DoS due to infinite re-renders on API errors

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

6.8CVSS6.8AI score0.00021EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added 2026/01/16 11:25 a.m.2 views

EUVD-2026-2916

Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...

6.8CVSS6.2AI score0.00021EPSS
Exploits0References6
Redos
Redos
added 2025/12/17 12:0 a.m.4 views

ROS-20251217-7310

A vulnerability in Mozilla Firefox and Firefox ESR browsers is related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

3.4CVSS6.5AI score0.00038EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.4 views

PT-2026-3244

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.11.x through 10.11.8 Mattermost versions 11.1.x through 11.1.1 Mattermost versions 11.0.x through 11.0.6 Description The software contains a flaw that does not prevent infinite re-renders when API errors occur...

9.9CVSS5.2AI score0.00733EPSS
Exploits44References121
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2004-1693

Malware in sbrugna...

5CVSS6.4AI score0.09678EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2025/09/28 1:2 a.m.1 views

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

5.5CVSS7AI score0.00021EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-48883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent A user is able to...

7.8CVSS5.9AI score0.00015EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/10/17 12:0 a.m.2 views

PT-2024-7378 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions up to 129.0.2792.52 Description: A spoofing issue is present in Microsoft Edge, related to errors in user interface information representation. This could allow a remote attacker to conduct spoofing...

5CVSS6.8AI score0.00231EPSS
Exploits0References14
Redos
Redos
added 2024/08/20 12:0 a.m.26 views

ROS-20240820-01

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to the use of memory after its release. memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code using a specially crafted w...

8.4CVSS8.1AI score0.01767EPSS
Exploits3
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.1 views

PT-2024-1956 · Microsoft · Windows Printing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Printing Service affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows printing service. Exploitation of this issue may allow a remote...

7.8CVSS9.2AI score0.01257EPSS
Exploits0References9
Citrix
Citrix
added 2023/09/15 12:0 a.m.4 views

XenServer stay in Disabled state after rebooting, after a while it got disconnected from pool

XenServer stay in Disabled state after rebooting, and after a while it got disconnected from pool. Try to enable host by CLI, it reports "Pool Master is unreachable" root@test-xs xe host-enable host=test-xs Seen from /var/log/xensource.log like below: Mar 16 11:28:48 test-xs xapi: debug||0...

7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.1 views

PT-2023-5058 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Office. It allows a remote attacker to conduct spoofing attacks...

5.5CVSS9.2AI score0.001EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.1 views

PT-2023-3520 · Microsoft · Outlook

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Microsoft Outlook email client. This can allow a remote attacker to conduct spoofi...

7.8CVSS6.6AI score0.00609EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.1 views

PT-2023-6805 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can allow an attacker to conduct spoofing attacks. Recommendations: At the moment,...

5CVSS9.3AI score0.0012EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.1 views

PT-2023-3170 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Server Subscription Edition affected versions not specified Description: The issue is related to errors in the user interface's representation of information. It...

8.5CVSS9.3AI score0.00433EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/02/14 12:0 a.m.0 views

PT-2023-1644 · Microsoft · Office Onenote

Name of the Vulnerable Software and Affected Versions: Microsoft OneNote affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of Microsoft OneNote. Exploitation of this issue may allow a remote attacker to elevate...

6.8CVSS9.3AI score0.06117EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.2 views

PT-2022-5319 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Microsoft Office packages. Exploitation of this issue may allow a remote attacker to...

7.8CVSS9.2AI score0.1109EPSS
Exploits0References5
Rows per page
Query Builder