Lucene search
+L

7 matches found

Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•9 views

PT-2026-91154

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel member-management permission during playbook run creation, allowing an authenticated channel member to add an arbitrary user to a restricted channel via the run owner field...

7.1CVSS5.7AI score0.0029EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/14 12:00 a.m.•2 views

CVE-2026-8821: Missing Authorization

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to validate channel member-management permission during playbook run creation, allowing an authenticated channel member to add an arbitrary user to a restricted channel via the run owner field...

7.1CVSS5.8AI score0.0029EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/14 3:15 p.m.•51 views

CVE-2026-59841

Technical details for CVE-2026-59841 are not publicly available in the provided documents. Monitor Fortinet advisories and NVD/CVE records for updates on affected product/version, impact, and fixes.

7.5CVSS6.1AI score0.00235EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/11 8:08 p.m.•47 views

CVE-2026-53815 OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions

OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from channels not intended for them by exploiting insufficient validation in the affected feature, potentially exposing...

7.1CVSS0.00361EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:33 a.m.•12 views

CVE-2024-39837

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6 fail to properly restrict channel creation which allows a malicious remote to create arbitrary channels, when shared channels were enabled...

5.4CVSS7.1AI score0.00283EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•15 views

Juniper Networks Junos OS Evolved Security Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from the presence of a vulnerability that improperly restricts the communication channel to the target endpoint, allowing ...

6.9CVSS6.2AI score0.00332EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/17 12:00 a.m.•70 views

CVE-2022-39389 Witness Block Parsing DoS Vulnerability in lnd

Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...

8.2CVSS8.3AI score0.01066EPSS
SaveExploits1References4
Rows per page
Query Builder