3048 matches found
SUSE CVE-2025-52931
Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to update channel subscription endpoint with an invalid request body...
SUSE CVE-2025-53857
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to get channel subscription details without proper access to the channel via API call to the GET autocomplete/GetChannelSubscriptions endpoint...
SUSE CVE-2025-53910
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the channel which allows attackers to create a channel subscription without proper access to the channel via API call to the edit channel subscription endpoint...
SUSE CVE-2025-54458
Mattermost Confluence Plugin version 1.5.0 fails to check the access of the user to the Confluence space which allows attackers to create a subscription for a Confluence space the user does not have access to via the create subscription endpoint...
SUSE CVE-2025-54525
Mattermost Confluence Plugin version 1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant hit to create channel subscription endpoint with an invalid request body...
Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
Linux Distros Unpatched Vulnerability : CVE-2022-42705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asteris...
Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21459)
Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an edit channel subscription...
Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21456)
Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause access to subscription details...
Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21447)
Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an editorial subscription...
Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21455)
Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause access to subscription details...
Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21458)
Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the creation of subscriptions...
Malicious code in cypress-eris-rocket-subscription (npm)
The package cypress-eris-rocket-subscription was found to contain malicious code...
Malicious code in subscription-virgo-cosmiconfig-nodemon (npm)
The package subscription-virgo-cosmiconfig-nodemon was found to contain malicious code...
Malicious code in subscription-cross-env-dione-protractor (npm)
The package subscription-cross-env-dione-protractor was found to contain malicious code...
MAL-2025-33632 Malicious code in solarnebula-sequelize-subscription-biogeochemistry (npm)
The package solarnebula-sequelize-subscription-biogeochemistry was found to contain malicious code...
MAL-2025-39025 Malicious code in webpack-lepton-xenos-subscription (npm)
The package webpack-lepton-xenos-subscription was found to contain malicious code...
Malicious code in sagitta-package-subscription-google (npm)
The package sagitta-package-subscription-google was found to contain malicious code...