13076 matches found
Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Console setting, which allows authenticated users to view members and member information of archived channels even when this setting is disabled...
WordPress Xelion Webchat plugin <= 9.1.0 - Privilege Escalation Vulnerability
Privilege Escalation Vulnerability discovered by LVT-tholv2k in WordPress Plugin Xelion Webchat versions = 9.1.0...
CVE-2025-22080 fs/ntfs3: Prevent integer overflow in hdr_first_de()
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdrfirstde The "deoff" and "used" variables come from the disk so they both need to check. The problem is that on 32bit systems if they're both greater than UINTMAX - 16 then the check does...
SUSE-SU-2025:1330-1 Security update for rsync
This update for rsync fixes the following issues: - Fixed bwlimit=0 option broken by CVE-2024-12088 fix bsc1239649...
RHSA-2025:3935 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2025:3903 Red Hat Security Advisory: kernel security update
Bulletin has no description...
GHSA-J639-M367-75CF Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activateai override property to a post via the Wrangler plugin, provided...
Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to prevent Wrangler posts from triggering AI responses. This vulnerability allows users without access to the AI bot to activate it by attaching the activateai override property to a post via the Wrangler plugin, provided...
GHSA-H4RR-F37J-4HH7 Mattermost Incorrect Authorization vulnerability
Mattermost versions 10.5.x = 10.5.1, 10.4.x = 10.4.3, 9.11.x = 9.11.9 fail to check the "Allow Users to View Archived Channels" configuration when fetching channel metadata of a post from archived channels, which allows authenticated users to access such information when a channel is archived...
PT-2025-16898 · Unknown · Sourcecodester Simple Hotel Booking System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Hotel Booking System version 1.0 Description: A critical vulnerability was found in the Login function, where the manipulation of the uname argument leads to a buffer overflow. This issue can be exploited on the local...
CVE-2024-53305
An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query...
CVE-2025-30702
...
CVE-2025-30702
The PT-2025-16436 entry confirms CVE-2025-30702 affects Oracle Database Server's Fleet Patching and Provisioning component, specifically versions 19.3–19.26. An unauthenticated attacker over HTTP can read a subset of Fleet Patching and Provisioning data. The root cause is a vulnerability in FP&P,...
CVE-2025-30733
...
CVE-2025-30729
The CVE-2025-30729 vulnerability affects Oracle Communications Order and Service Management (OC OSM) in Oracle Communications Applications, specifically versions 7.4.0–7.5.0. An attacker with network access via HTTP and low privileges can exploit it, with user interaction required, to cause unaut...
CVE-2025-30729
...
CVE-2025-30725
Oracle VM VirtualBox core (7.1.6) is affected by CVE-2025-30725. A local attacker with logon can compromise the VirtualBox instance, potentially causing a hang or crash (DoS) and unauthorized read/update/delete access to data. Additional scope changes may impact other products. CVSSv3.1 base scor...
CVE-2025-30723
...