MINI-VQH4-WQ9J-7Q59

Bulletin has no description...

CVE-2026-1621

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

MINI-23JH-C53P-R3C2

Bulletin has no description...

CVE-2026-1621 Register Bypass in Universal Sotware's E-Municipality

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

CVE-2026-1621

Technical details about CVE-2026-1621 are not publicly available in the provided documents. Monitor for updates from official advisories; current entries only reiterate an authentication bypass in Universal Software Inc. E-Municipality with no specifics.

CVE-2026-1621

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

MINI-W7CF-29JW-7MJG

Bulletin has no description...

MINI-7W52-QXRG-4XC3

Bulletin has no description...

SQL Injection

Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...

Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-5887 vulnerabilities

Vulnerabilities for packages: gatus, gatus-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: commercial-grafana, gotrue-fips, dex, omni, teleport-operator-fips, teleport, omni-fips, neuvector-fips, rancher-agent, zitadel, mattermost-fips, neuvector, mattermost, dex-fips, gotrue, rancher...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: authentik, azure-service-operator, azure-service-operator-fips, cloudbeat, vault, cloudbeat-fips, vault-fips, authentik-fips, rancher-agent, rancher...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: src-fingerprint-fips, bom, kargo, grafana-alloy-fips, kots, goreleaser, pulumi-language-dotnet, flux-image-automation-controller-fips, flux-source-controller-fips, argo-workflows-fips, argo-events-fips, grafana-alloy, flux-kustomize-controller-fips, tekton-pipelines,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: syft-fips, rclone-fips, chainloop-cli-fips, rancher-fleet-fips, gitlab-rails-ce, skaffold-fips, grafana-fips, kyverno-fips, syft, rclone, argo-cd, terragrunt, cerbos, flux, rancher-fleet, telegraf, upwind-agent, seaweedfs-rocksdb, teleport, external-secrets-operator,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: speedtest-go, crossplane-provider-aws-kms, crossplane-provider-aws-cloudfront-fips, json-exporter, terraform-provider-azapi-fips, yq, cluster-autoscaler, gitlab-rails-ce, pguser, pgpool2exporter-fips, vertical-pod-autoscaler, kubernetes-dashboard-metrics-scraper-fips...

GO-2026-5496 vulnerabilities

Vulnerabilities for packages: rancher-fleet-fips, gitlab-rails-ce, kyverno-fips, apko-fips, cg, gitsign, nfpm, steampipe, flux, pulumi-kubernetes-operator, redpanda-console, witness, trivy-operator, gomplate, cloudbeat, chainctl-fips, gomplate-fips, terragrunt-fips, guac, gitea, kyverno,...