8798 matches found
GHSA-X3HX-CH7P-8XGG Mattermost allows regular users to access archived channel content and files
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
CVE-2025-41436
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
EUVD-2025-186557
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
MGASA-2025-0290 Updated ruby packages fix security vulnerabilities
Net::IMAP vulnerable to possible DoS by memory exhaustion. CVE-2025-25186 In the CGI gem before 0.4.2 for Ruby, the CGI::Cookie.parse method in the CGI library contains a potential Denial of Service DoS vulnerability. The method does not impose any limit on the length of the raw cookie value it...
EUVD-2025-175318
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...
CVE-2025-62484 Zoom Workplace Clients - Inefficient Regular Expression Complexity
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access...
PT-2025-46839
Name of the Vulnerable Software and Affected Versions Zoom Workplace Clients versions prior to 6.5.10 Description An inefficient regular expression complexity in certain Zoom Workplace Clients may allow an unauthenticated user to conduct an escalation of privilege via network access. The issue...
Siemens SIMATIC S7-1500 Uncontrolled Resource Consumption (CVE-2020-8492)
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service ReDoS attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking. This plugin...
MAL-2025-116676 Malicious code in regular_guppy_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efdfe8ff1854f9bb572f43da75c81cf37046a4994ad45a3ecc770a5c57ac922 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89208
Malicious code in regularguppyz3n npm...
kernel: ext4: only dirty folios when data journaling regular files
In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionally reproduces a crash that looks as follows: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... Call Trace:...
EUVD-2025-78465
Malicious code in regularmeadowlarkz3n npm...
EUVD-2025-52388
Malicious code in regular-blush-heron npm...
EUVD-2025-52387
Malicious code in regular-copper-opossum npm...
MAL-2025-70261 Malicious code in regular-blush-heron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701cf95dd3d10fa91840b0643c097fe4584a6c16f9f60c1c8aa4d26bf646ee97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52389
Malicious code in regular-aqua-heron npm...
EUVD-2025-52386
Malicious code in regular-gray-duck npm...
Regular Expression Denial Of Service (ReDoS)
sinatra is vulnerable to Denial-Of-Service. The vulnerability is due to inefficient header parsing when the etag method is used, allowing attackers to send crafted headers that consume excessive CPU time and cause denial of service...
