Lucene search
K

6 matches found

SUSE CVE
SUSE CVE
added 2026/05/11 2:13 p.m.8 views

SUSE CVE-2026-43418

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Prevent CID stalls due to concurrent forks A newly forked task is accounted as MMCID user before the task is visible in the process' thread list and the global task list. This creates the following problem: CPU1 CPU2...

5.7AI score0.00107EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/03/26 3:11 p.m.4 views

CVE-2026-30943

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An insufficient authorization check in the file replace API allows a user with only list visibility permission UserPermListOtherUploads to delete another user's file by abusing the...

4.1CVSS5.8AI score0.00179EPSS
Exploits0References1
CVE
CVE
added 2026/03/13 7:7 p.m.6 views

CVE-2026-30943

Gokapi prior to version 2.2.4 contains an insufficient authorization check in the file replace API. A user with only list visibility permission (UserPermListOtherUploads) could delete another user’s file by abusing the deleteNewFile flag, effectively escalating privileges. The issue is fixed in 2...

4.1CVSS5.8AI score0.00179EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/13 7:7 p.m.3 views

CVE-2026-30943 Gokapi has Privilege Escalation in File Replace

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An insufficient authorization check in the file replace API allows a user with only list visibility permission UserPermListOtherUploads to delete another user's file by abusing the...

4.1CVSS5.8AI score0.00179EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/13 7:7 p.m.25 views

CVE-2026-30943 Gokapi has Privilege Escalation in File Replace

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An insufficient authorization check in the file replace API allows a user with only list visibility permission UserPermListOtherUploads to delete another user's file by abusing the...

4.1CVSS0.00179EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/02/03 12:0 a.m.3 views

PT-2025-5636 · Tshock · Tshock

Name of the Vulnerable Software and Affected Versions: TShock affected versions not specified Description: This issue allows malicious clients to connect to a server without completing the connection handshake, occupying a player slot, and receiving data from the server, even if they are banned...

6.9CVSS6.8AI score
Exploits0References4
Rows per page
Query Builder