Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-18256 | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to properly restrict private teams from public team search results, which allows an authenticated user without permission to list private teams to discl | 2026-10-29 18:08:25 | 2026-10-16 08:17:12 |
| CVE-2026-18560 | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate user’s permissions before other validations which allows non-content reviewers to infer a post’s flagged status via direct API call.. Matter | 2026-10-29 18:08:18 | 2026-10-16 08:17:12 |
| CVE-2026-18799 | 4.3 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack import account binding to system administrator-initiated imports which allows an authenticated attacker with team admin privileges to | 2026-10-29 18:08:12 | 2026-10-16 08:17:13 |
| CVE-2026-85321 | 7.5 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. | 2026-10-29 18:07:46 | 2026-10-13 19:20:53 |
| CVE-2026-83564 | 7.0 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | 2026-10-29 18:05:34 | 2026-10-13 19:19:58 |
| CVE-2026-18551 | 6.5 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authenticated attacker to escalate a guest account to team or channel admin | 2026-10-29 18:00:27 | 2026-10-16 07:17:12 |
| CVE-2026-85828 | 7.0 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. | 2026-10-29 17:58:40 | 2026-10-13 19:21:08 |
| CVE-2026-98059 | 5.5 | In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable do_wait() passes wo->wo_pid to the sched_process_wait tracepoint. kernel_wait4() leaves wo_pid NULL for wait4(-1), and kernel_wait | 2026-10-29 17:56:57 | 2026-09-25 11:17:34 |
| CVE-2026-83765 | 5.5 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. | 2026-10-29 17:54:20 | 2026-10-13 19:20:23 |
| CVE-2026-83766 | 4.2 | Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. | 2026-10-29 17:53:20 | 2026-10-13 19:20:23 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12597
Zapisa po stranici: