Lucene search
K

14 matches found

NVD
NVD
added yesterday4 views

CVE-2026-45085

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, four authorization/disclosure issues in the chat plugin one also involving discourse-calendar: read-only category users...

5.3CVSS0.00036EPSS
Exploits0References1
EUVD
EUVD
added yesterday3 views

EUVD-2026-36558

Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.4, 2026.3.0-latest to before 2026.3.1, and 2026.4.0-latest to before 2026.4.1, four authorization/disclosure issues in the chat plugin one also involving discourse-calendar: read-only category users...

5.3CVSS5.3AI score0.00036EPSS
Exploits0References1
OSV
OSV
added 2026/03/27 7:11 a.m.2 views

BIT-DISCOURSE-2026-33410 Discourse hardens chat DM channel creation and expansion

Discourse is an open-source discussion platform. Versions prior to 2026.3.0, 2026.2.1, and 2026.1.2 have two authorization issues in the chat direct message API. First, when creating a direct message channel or adding users to an existing one, the targetgroups parameter was passed directly to the...

5.4CVSS5.9AI score0.00051EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/19 9:57 p.m.1 views

CVE-2026-33410 Discourse hardens chat DM channel creation and expansion

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have two authorization issues in the chat direct message API. First, when creating a direct message channel or adding users to an existing one, the targetgroups parameter was passed direct...

5.4CVSS5.9AI score0.00051EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/19 9:57 p.m.2 views

CVE-2026-33410

Discourse is an open-source discussion platform. Versions prior to 2026.3.0-latest.1, 2026.2.1, and 2026.1.2 have two authorization issues in the chat direct message API. First, when creating a direct message channel or adding users to an existing one, the targetgroups parameter was passed direct...

5.4CVSS5.8AI score0.00051EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2021-28206

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.00808EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2021-41055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in...

7.5CVSS7.2AI score0.00808EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:37 a.m.1 views

SUSE CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

7.5CVSS7.1AI score0.00808EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.1 views

The vulnerability of extension XEP-0308: Last Message Correction for the Jabber/XMPP client Gajim, which allows a violator to trigger a service failure.

The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...

7.8CVSS7.2AI score0.00808EPSS
Exploits1References5Affected Software2
NVD
NVD
added 2021/10/11 3:15 a.m.10 views

CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

7.5CVSS0.00808EPSS
Exploits1References2
OSV
OSV
added 2021/10/11 3:15 a.m.3 views

CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

7.5CVSS7.2AI score
Exploits0References2
OSV
OSV
added 2021/10/11 3:15 a.m.1 views

DEBIAN-CVE-2021-41055

Gajim 1.2.x and 1.3.x before 1.3.3 allows remote attackers to cause a denial of service crash via a crafted XMPP Last Message Correction XEP-0308 message in multi-user chat, where the message ID equals the correction ID...

7.5CVSS7.3AI score0.00808EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/10/11 12:0 a.m.2 views

Gajim 安全漏洞

Gajim is a full-featured Xmpp client. A security vulnerability exists in Gajim 1.2.x and 1.3.3 before 1.3.3, which can be exploited by an attacker to cause a denial of service crash in a multiuser chat via a crafted XMPP Last Message Correction XEP-0308 message, where the message ID is equal to t...

7.5CVSS7.2AI score0.00808EPSS
Exploits1References6
The Hacker News
The Hacker News
added 2011/07/06 4:56 a.m.9 views

Lulzsec Releases Final Message to the friends around the globe

Lulzsec Releases Final Message to the friends around the globe Anonymous Tweet Video message as "Lulzsec Last Message". In 10minutes the Video get 200 Likes and 7000 Views. Every message of Anonymous/ Lulzsec is spreading like Fire. The Video Message is here : Lulzsec Message is : Friends around...

6.8AI score
Exploits0
Rows per page
Query Builder