43 matches found
CVE-2025-67903: Improper Verification of Cryptographic Signature
Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...
CVE-2026-49009
Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal...
EUVD-2021-21985
Malware in sbrugna...
EUVD-2024-36393
Malicious code in bioql PyPI...
CVE-2025-49603
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
CVE-2025-49603: Improper Access Control
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
CVE-2025-49603
The Northern.tech Mender Server is affected by an Incorrect Access Control vulnerability (CWE-284) in versions prior to 3.7.11 and 4.x versions prior to 4.0.1 . The flaw stems from improper access controls within the software, which can lead to unauthorized access. While the documents do not prov...
CVE-2025-49603
Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...
CVE-2024-46948
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...
CVE-2024-46947
Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...
CVE-2022-41324
Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...
CVE-2022-45929
Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...
CVE-2024-37019
Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...
CVE-2024-55959
Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...
CVE-2024-55959
Northern.tech Mender Client versions 4.0.0 through 4.0.4 are affected by a security vulnerability involving insecure permissions on a private key file . This flaw could allow for unauthorized access . To resolve this issue, users are recommended to update to version 4.0.5 or later . Exploitation ...
CVE-2024-46948
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...
CVE-2024-46948
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...
CVE-2024-46947
Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...
CVE-2024-46948
CVE-2024-46948 affects Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5, due to an Incorrect Access Control flaw. The vulnerability permits access control bypass (specifics not detailed in the provided documents). Affected components/versions are clearly stated; remediation is to upgrade ...
