72646 matches found
MINI-HFG8-4WFC-6GMG
Bulletin has no description...
MINI-W2XR-2Q5Q-MX8W
Bulletin has no description...
MINI-XJX6-2WQ8-XW38
Bulletin has no description...
MINI-QJQ6-QC9V-2P34
Bulletin has no description...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the /api/v1/sources/id/image-url endpoint, which fails to properly verify organizational ownership. An attacker can access and download OVA images containing sensitive data, such as...
PT-2026-50581
Name of the Vulnerable Software and Affected Versions HTML::Gumbo versions prior to 0.19 Description Type confusion occurs when the walk tree function in lib/HTML/Gumbo.xs fails to properly handle the element. This element is incorrectly treated as a text node, causing strlen to over-read the hea...
PT-2026-47193
Name of the Vulnerable Software and Affected Versions Tenda HG7HG9 affected versions not specified Tenda HG10 300001138 en xpon affected versions not specified Description A stack-based buffer overflow can be triggered remotely via the formDOMAINBLK function located in the /boaform/formDOMAINBLK...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the UpdateSourceInventory and UpdateAgentStatus handlers due to insufficient validation of the sourceid claim in JSON Web Tokens against the requested source ID. An attacker can gain...
CVE-2026-45746
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper validation of the sessionId parameter. The backend...
CVE-2026-11439
A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknown functionality of the file /projects/ of the component Parent Project Handler. The manipulation of the argument project.parentId results in improper authorization. The attack may be performed from...
CVE-2026-11434
creationtimestamp| type| source ---|---|--- 2026-06-06 16:40:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnn3rts64p2a...
MINI-H8PJ-6WMH-HPJP
Bulletin has no description...
MINI-32F2-JQJ6-866R
Bulletin has no description...
MINI-XX52-Q432-CMPJ
Bulletin has no description...
MINI-6C22-M7P5-MHH7
Bulletin has no description...
MINI-VXM2-CRJQ-859Q
Bulletin has no description...
MINI-2V95-Q4CM-F46Q
Bulletin has no description...
MINI-V927-C226-CCJQ
Bulletin has no description...