eAhmed
8 kredili kayıt · son 12 ayda 4 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
21İzleyin | CVE-2026-28735İstismar yok | GitHub OAuth Scope Validationmattermost · mattermost server · CWE-863 | Orta5,4 | — | %0,2 | 22 May 2026 |
28İzleyin | CVE-2026-3473İstismar yok | Improper file ownership validation in the Boards API allows unauthorised file accessmattermost · mattermost server · CWE-639 | Yüksek7,1 | — | %0,2 | 22 May 2026 |
17İzleyin | CVE-2026-6342İstismar yok | Group prefix matching bypass for subscriptionsmattermost · mattermost server · CWE-863 | Orta4,3 | — | %0,3 | 18 May 2026 |
17İzleyin | CVE-2026-6341İstismar yok | Incomplete group locking implementationmattermost · mattermost server · CWE-863 | Orta4,3 | — | %0,3 | 18 May 2026 |
21İzleyin | CVE-2025-3230İstismar yok | Bypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Servermattermost · mattermost server · CWE-303 | Orta5,4 | — | %0,2 | 30 May 2025 |
16İzleyin | CVE-2025-2571İstismar yok | Google OAuth Authentication Bypass for Converted Bot Accountsmattermost · mattermost server · CWE-303 | Orta4,2 | — | %0,2 | 30 May 2025 |
21İzleyin | CVE-2025-2475İstismar yok | Unauthorized Bot Login Using Credentialsmattermost · mattermost server · CWE-303 | Orta5,4 | — | %0,2 | 14 Nis 2025 |
35İzleyin | CVE-2025-1412İstismar yok | Session Persistence After User-to-Bot Conversionmattermost · mattermost server · CWE-384 | Yüksek8,8 | — | %0,3 | 24 Şub 2025 |
- CVE-2026-2873521İzleyin
GitHub OAuth Scope Validation
OrtaCVSS 5,4İstismar yokEPSS %0mattermost · mattermost server22 May 2026
- CVE-2026-347328İzleyin
Improper file ownership validation in the Boards API allows unauthorised file access
YüksekCVSS 7,1İstismar yokEPSS %0mattermost · mattermost server22 May 2026
- CVE-2026-634217İzleyin
Group prefix matching bypass for subscriptions
OrtaCVSS 4,3İstismar yokEPSS %0mattermost · mattermost server18 May 2026
- CVE-2026-634117İzleyin
Incomplete group locking implementation
OrtaCVSS 4,3İstismar yokEPSS %0mattermost · mattermost server18 May 2026
- CVE-2025-323021İzleyin
Bypass of System Admin User Deactivation Controls for Personal Access Tokens in Mattermost Server
OrtaCVSS 5,4İstismar yokEPSS %0mattermost · mattermost server30 May 2025
- CVE-2025-257116İzleyin
Google OAuth Authentication Bypass for Converted Bot Accounts
OrtaCVSS 4,2İstismar yokEPSS %0mattermost · mattermost server30 May 2025
- CVE-2025-247521İzleyin
Unauthorized Bot Login Using Credentials
OrtaCVSS 5,4İstismar yokEPSS %0mattermost · mattermost server14 Nis 2025
- CVE-2025-141235İzleyin
Session Persistence After User-to-Bot Conversion
YüksekCVSS 8,8İstismar yokEPSS %0mattermost · mattermost server24 Şub 2025