CVE-2025-67903: Improper Verification of Cryptographic Signature

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...

EUVD-2021-21985

Malware in sbrugna...

EUVD-2024-36393

Malicious code in bioql PyPI...

CVE-2025-49603

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

CVE-2025-49603

The Northern.tech Mender Server is affected by an Incorrect Access Control vulnerability (CWE-284) in versions prior to 3.7.11 and 4.x versions prior to 4.0.1 . The flaw stems from improper access controls within the software, which can lead to unauthorized access. While the documents do not prov...

CVE-2025-49603: Improper Access Control

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

CVE-2025-49603

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...

CVE-2022-45929

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

CVE-2024-55959

Northern.tech Mender Client versions 4.0.0 through 4.0.4 are affected by a security vulnerability involving insecure permissions on a private key file . This flaw could allow for unauthorized access . To resolve this issue, users are recommended to update to version 4.0.5 or later . Exploitation ...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2024-46947

Northern.tech Mender is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability in versions prior to 3.6.6 and versions 3.7.x prior to 3.7.7 . The vulnerability allows an attacker to potentially abuse the server to make unintended requests. While specific technical root causes or exploit...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

Northern.tech Mender 安全漏洞

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in versions of Northern.tech Mender prior to 2024.07.11 that stems from the presence of a server-side request forgery...