Lucene search
K

1070 matches found

Snyk
Snyk
added 2025/11/14 8:43 a.m.1 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...

4.3CVSS6.5AI score0.00031EPSS
Exploits0References2
Snyk
Snyk
added 2025/11/14 8:43 a.m.1 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...

4.3CVSS6.5AI score0.00031EPSS
Exploits0References2
Snyk
Snyk
added 2025/11/14 8:43 a.m.1 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...

4.3CVSS6.8AI score0.00031EPSS
Exploits0References2
Snyk
Snyk
added 2025/11/14 8:43 a.m.0 views

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...

4.3CVSS6.5AI score0.00031EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/14 8:0 a.m.5 views

CVE-2025-41436 Unauthorized access to archived channel content via threads interface

Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...

3.1CVSS0.00031EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/14 8:0 a.m.2 views

EUVD-2025-186557

Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...

3.1CVSS6.3AI score0.00031EPSS
Exploits0References2
CVE
CVE
added 2025/11/14 8:0 a.m.11 views

CVE-2025-41436

Mattermost Server

4.3CVSS6.4AI score0.00031EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/14 8:0 a.m.1 views

CVE-2025-41436 Unauthorized access to archived channel content via threads interface

Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...

3.1CVSS6.4AI score0.00031EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/14 12:0 a.m.2 views

PT-2025-46946

Name of the Vulnerable Software and Affected Versions Mattermost versions prior to 11.0 Description Mattermost fails to correctly implement the "Allow users to view archived channels" setting. This allows regular users to access content and files within archived channels through the "Open in...

4.3CVSS6.4AI score0.00031EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2025/11/12 9:36 p.m.8 views

Wasmtime provides unsound API access to a WebAssembly shared linear memory

Impact Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear memory. This is not sound for shared linear memories, which could be modified in paralle...

1.8CVSS6.6AI score0.00013EPSS
Exploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/11/06 12:0 a.m.7 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990553)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990553 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: In several other...

7.8CVSS6.6AI score0.87351EPSS
Exploits149References4
OSV
OSV
added 2025/10/19 7:8 p.m.1 views

JLSEC-2025-123 libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale h...

libavcodec/pthreadframe.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...

8.1CVSS7.7AI score0.0032EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-14455

Malware in sbrugna...

7.8CVSS7.6AI score0.00473EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2006-6401

Malware in sbrugna...

7.2CVSS6.4AI score0.00102EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-0881

Malware in sbrugna...

9.8CVSS9.5AI score0.00464EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-1950

Malware in sbrugna...

7.5CVSS6.4AI score0.00768EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2010-4590

Malware in sbrugna...

5CVSS6.4AI score0.00578EPSS
Exploits0References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-1495

Malware in sbrugna...

4.3CVSS6.4AI score0.01916EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-2699

Malware in sbrugna...

3.3CVSS7.6AI score0.0006EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-3734

Malware in sbrugna...

5.4CVSS5.4AI score0.00189EPSS
Exploits5References4
Rows per page
Query Builder