159 matches found
EUVD-2024-52867
Malicious code in bioql PyPI...
EUVD-2022-33890
Malicious code in bioql PyPI...
EUVD-2022-53483
Malicious code in bioql PyPI...
EUVD-2024-42153
Malicious code in bioql PyPI...
CVE-2025-49603
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
CVE-2025-49603
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
Northern.tech Mender Server 安全漏洞
Northern.tech Mender Server is an IoT server-side software from Northern.tech, USA. A security vulnerability exists in Northern.tech Mender Server versions prior to 3.7.11 and prior to 4.0.1 that stems from improper access control...
CVE-2025-49603
Northern.tech Mender Server is vulnerable to an Incorrect Access Control issue in versions prior to 3.7.11 and versions prior to 4.0.1 in the 4.x branch. While the specific technical root cause or impacted components are not detailed, the vulnerability could allow unauthorized access to device gr...
CVE-2025-49603
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
PT-2025-27004 · Unknown · Mender Server
Name of the Vulnerable Software and Affected Versions: Mender Server versions 3.7.11 and earlier, 4.x versions prior to 4.0.1 Description: The issue is related to Incorrect Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or...
CVE-2025-49603
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
CVE-2024-46948
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...
CVE-2024-46947
Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2024-47190
Northern.tech Hosted Mender before 2024.07.11 allows SSRF...
CVE-2022-32290
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...
CVE-2022-41324
Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...
CVE-2022-29555
The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking...
CVE-2022-45929
Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...