1149 matches found
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of the Allow users to view archived channels setting in the threads interface. An attacker can gain unauthorized access to archived channel content and files by using the "Open in...
CVE-2025-41436 Unauthorized access to archived channel content via threads interface
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
CVE-2025-41436
Mattermost Server
CVE-2025-41436 Unauthorized access to archived channel content via threads interface
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
EUVD-2025-186557
Mattermost versions 11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads...
Wasmtime provides unsound API access to a WebAssembly shared linear memory
Impact Wasmtime's Rust embedder API contains an unsound interaction where a WebAssembly shared linear memory could be viewed as a type which provides safe access to the host Rust to the contents of the linear memory. This is not sound for shared linear memories, which could be modified in paralle...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990553)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990553 advisory. In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: In several other...
JLSEC-2025-123 `libavcodec/pthread_frame.c` in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale...
libavcodec/pthreadframe.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances e.g., hardware re-initialization upon a mid-video SPS change when...
EUVD-2019-11932
Malware in sbrugna...
EUVD-2006-4097
Malware in sbrugna...
EUVD-2019-2369
Malware in sbrugna...
EUVD-2017-14455
Malware in sbrugna...
EUVD-2013-0918
Malware in sbrugna...
EUVD-2017-6358
Malware in sbrugna...
EUVD-2008-6714
Malware in sbrugna...
EUVD-2020-3028
Malware in sbrugna...
EUVD-2006-1717
Malware in sbrugna...