EUVD-2024-49090

Malicious code in bioql PyPI...

EUVD-2025-21914

Malicious code in bioql PyPI...

EUVD-2024-16728

Malicious code in bioql PyPI...

EUVD-2023-2569

Malicious code in bioql PyPI...

EUVD-2024-37800

Malicious code in bioql PyPI...

EUVD-2024-44620

Malicious code in bioql PyPI...

Ansible Core user module Confidential Data Access

The vulnerability of the user module in Ansible Core and Ansible is related to incorrect authentication. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...

Android updateState() Function Privilege Escalation

The vulnerability of the updateState function in the ContentProtectionTogglePreferenceController.java module of Android operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary co...

Android onCreate() Privilege Escalation

The vulnerability of the onCreate function in the SelectAccountActivity.java module of Android operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2025-9965 UDP Service Weak Authentication

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9965 UDP Service Weak Authentication

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2023-49564

The CBIS/NCS Manager API is vulnerable to an authentication bypass. By sending a specially crafted HTTP header, an unauthenticated user can gain unauthorized access to API functions. This flaw allows attackers to reach restricted or sensitive endpoints of the HTTP API without providing any valid...

Nokia CloudBand Infrastructure Software and Nokia Container Service have security vulnerabilities

Nokia CloudBand Infrastructure Software and Nokia Container Service are both products of the Finnish company Nokia.Nokia CloudBand Infrastructure Software is a platform that supports the virtualization of network functions. Nokia Container Service is a container management service. A security...

Siemens Mobility Trainguard End-of-Train and Head-of-Train Weak Authentication Vulnerability

The Trainguard End-of-Train EOT is a new generation of end-of-train devices for connecting on-board telemetry.The Trainguard Head-of-Train HOT is a front-of-train device. These devices communicate using the S-9152 standard. A weak authentication vulnerability exists in Siemens Mobility Trainguard...

PT-2026-52615

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.0.6 Description The Custom MCP feature, used for executing OS commands like launching local MCP servers, is unsandboxed. Due to a minimal authentication and authorization model lacking role-based access control, and...

CVE-2025-30468: Weak Authentication

This issue was addressed through improved state management. This issue is fixed in iOS 26 and iPadOS 26. Private Browsing tabs may be accessed without authentication...

CRMEB code-related vulnerabilities

CRMEB is a Java mall system . CRMEB 5.6.1 and previous versions of server-side request forgery vulnerability , the vulnerability stems from the file app/services/out/OutAccountServices.php parameter pushtokenurl does not implement a sufficient authentication mechanism to confirm the source of the...

Linux Distros Unpatched Vulnerability : CVE-2023-41900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty...

RUGGEDCOM RST2428P DoS

The vulnerability of the web interface of the microprogramming software for the RUGGEDCOM RST2428P, SCALANCE XC-300 Series, SCALANCE XC-400 Series, SCALANCE XCM-/XRM-/XCH-/XRH-300 Series, SCALANCE XM-400/XR-500 Series, and SCALANCE XR-300 6GK5334-xTSxx Series devices is related to deficiencies in...

Linux Distros Unpatched Vulnerability : CVE-2025-24070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2025-24070 Note that Nessus relies...