13120 matches found
BELL-CVE-2025-38077
Bulletin has no description...
BELL-CVE-2025-38072
Bulletin has no description...
BELL-CVE-2025-38061
Bulletin has no description...
BELL-CVE-2025-38063
Bulletin has no description...
BELL-CVE-2025-38064
Bulletin has no description...
BELL-CVE-2025-38057
Bulletin has no description...
BELL-CVE-2025-38051
Bulletin has no description...
BELL-CVE-2025-38034
Bulletin has no description...
BELL-CVE-2025-38044
Bulletin has no description...
BELL-CVE-2025-38022
Bulletin has no description...
BELL-CVE-2025-38027
Bulletin has no description...
BELL-CVE-2025-38007
Bulletin has no description...
BELL-CVE-2025-38013
Bulletin has no description...
CVE-2024-4994 Cross-Site Request Forgery (CSRF) in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions starting from 17.1.0 before 17.1.1 which allowed for a CSRF attack on GitLab's GraphQL API leading to the execution of arbitrary GraphQL...
Mattermost allows an unauthorized Guest user access to Playbook
Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly retrieve requestorInfo from playbooks handler for guest users which allows an attacker access to the playbook run...
GHSA-QWWM-C582-82RX Mattermost allows unauthorized channel member management through playbook runs
Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to properly enforce channel member management permissions in playbook runs, allowing authenticated users without the 'Manage Channel Members' permission to add or remove users from public...
GHSA-PF4H-VRV6-CMVR DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
DNN.PLATFORM allows specially crafted content in URLs could be used with TokenReplace and not be properly sanitized by some SkinObjects. This vulnerability is fixed in 10.0.1...
MAL-2025-5210 Malicious code in vscode-webview-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c554272558835d430a639e8f5586c55232eac880a493f0e8228bd4ac5e8d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-4981 Path Traversal Leading to RCE by Any Authenticated Mattermost User
Mattermost versions 10.5.x = 10.5.5, 9.11.x = 9.11.15, 10.8.x = 10.8.0, 10.7.x = 10.7.2, 10.6.x = 10.6.5 fail to sanitize filenames in the archive extractor which allows authenticated users to write files to arbitrary locations on the filesystem via uploading archives with path traversal sequence...