Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:28 p.m.7 views

CVE-2026-4055

Mattermost versions 11.5.x = 11.5.1 fail to validate team-level runcreate permission against the target team when creating a playbook run which allows an authenticated team member to create runs in teams where they lack permission via specifying a different team ID in the run creation API request...

4.3CVSS5.5AI score0.00152EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/21 7:13 a.m.10 views

EUVD-2026-31221

Mattermost versions 11.5.x = 11.5.1 fail to validate team-level runcreate permission against the target team when creating a playbook run which allows an authenticated team member to create runs in teams where they lack permission via specifying a different team ID in the run creation API request...

4.3CVSS5.8AI score0.00152EPSS
Exploits0References1
NVD
NVD
added 2026/04/21 6:16 p.m.7 views

CVE-2026-40599

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allows a malicious software to impersonate an apple...

8.4CVSS0.00134EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.3 views

PT-2025-46945

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 11 Description The software does not properly restrict access to the archived channel search API. This allows guest users to discover archived public channels using the /api/v4/teams/team id/channels/search archive...

4.3CVSS6.5AI score0.00168EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/03 8:7 p.m.12 views

EUVD-2025-28903

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00309EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/07/14 12:0 a.m.4 views

PHPGurukul Online Fire Reporting System 安全漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/new-requests.php. An attacker ca...

8.8CVSS7AI score0.00318EPSS
Exploits1References5
OSV
OSV
added 2017/02/20 8:59 a.m.4 views

CVE-2016-7584

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "AppleMobileFileIntegrity" component, which allows remote attackers to spoof signed code by usin...

7.8CVSS5.7AI score0.01064EPSS
Exploits0References5
Rows per page
Query Builder