Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
โ€ขadded 2025/11/27 6:30 p.m.โ€ข8 views

Mattermost fails to sanitize team email addresses

Mattermost versions 11.0.x = 11.0.2, 10.12.x = 10.12.1, 10.11.x = 10.11.4, 10.5.x = 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/channelid/commonteams endpoint...

4.3CVSS6.8AI score0.00042EPSS
Exploits0References9Affected Software2
Snyk
Snyk
โ€ขadded 2025/11/14 8:43 a.m.โ€ข1 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the MSTeams plugin OAuth flow. An attacker can modify arbitrary posts by sending a crafted OAuth redirect URL. Remediation Upgrade...

5.4CVSS6.7AI score0.00048EPSS
Exploits0References2
OSV
OSV
โ€ขadded 2025/07/23 12:15 a.m.โ€ข2 views

CVE-2025-43484

A potential reflected cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website does not validate or sanitize the user input before rendering it in the response. HP has addressed the issue in the latest software update...

6.1CVSS5.6AI score0.0012EPSS
Exploits0References1
CNNVD
CNNVD
โ€ขadded 2025/07/23 12:0 a.m.โ€ข3 views

HP Poly Clariti Manager ๅฎ‰ๅ…จๆผๆดž

HP Poly Clariti Manager is a centralized management, control, and optimization software for video conferencing infrastructure from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Poly Clariti Manager versions prior to 10.12.1, which stems from a vulnerability that...

5.9CVSS6.5AI score0.00058EPSS
Exploits0References2
CVE
CVE
โ€ขadded 2025/07/22 11:36 p.m.โ€ข14 views

CVE-2025-43489

CVE-2025-43489 affects Hewlett-Packard Poly Clariti Manager prior to 10.12.1. The issue is a deserialization of untrusted data without validation in Poly Clariti Manager. HP has addressed the issue in the latest software update (version 10.12.1 or later). Connected documents confirm the affected ...

5.2CVSS7.1AI score0.00341EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
โ€ขadded 2025/07/22 11:21 p.m.โ€ข8 views

CVE-2025-43486 Poly Clariti Manager - Multiple Security Vulnerabilities

A potential stored cross-site scripting vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The website allows user input to be stored and rendered without proper sanitization. HP has addressed the issue in the latest software update...

5.7CVSS0.0011EPSS
Exploits0References1
Positive Technologies
Positive Technologies
โ€ขadded 2025/07/22 12:0 a.m.โ€ข5 views

PT-2025-30501 ยท Poly ยท Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions prior to 10.12.1 Description: A security issue has been identified in Poly Clariti Manager that may allow the retrieval of hardcoded cryptographic keys. Recommendations: Update Poly Clariti Manager to version...

5.9CVSS6.4AI score0.00058EPSS
Exploits0References7
Rows per page
Query Builder