com.efluid.oss:efluid-datagate-app (>=5.1.7, <=5.1.14), com.efluid.oss:efluid-datagate-app-cucumber (>=5.1.7, <=5.1.14) +8 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (4.1.8)

com.hazelcast:hazelcast MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =5.1.7, =5.1.7, =4.32.0, =3.11.5, =3.11.7 Source cves: CVE-2026-107726 Source...

com.efluid.oss:efluid-datagate-app (>=3.1.3, <=6.1.5), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.3, <=6.1.5) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=5.0.1, <=5.7.8)

org.pac4j:pac4j-jwt MAVEN version =5.0.1, =3.1.3, =3.1.3, =0.8.0-rc0, =0.8.0-rc0, =2.0.6, =2.2.1, =2.0.6, =2.1.0 Source cves: CVE-2026-29000 Source advisory: SNYK:JAVA-ORGPAC4J-15428218...

com.efluid.oss:efluid-datagate-app (>=3.1.3, <=6.1.5), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.3, <=6.1.5) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=5.0.1, <=5.7.8)

org.pac4j:pac4j-jwt MAVEN version =5.0.1, =3.1.3, =3.1.3, =0.8.0-rc0, =0.8.0-rc0, =2.0.6, =2.2.1, =2.0.6, =2.1.0 Source cves: CVE-2026-29000 Source advisory: GHSA-PM7G-W2CF-Q238...

com.efluid.oss:efluid-datagate-app (>=3.1.3, <=6.1.5), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.3, <=6.1.5) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=5.0.1, <=5.7.8)

org.pac4j:pac4j-jwt MAVEN version =5.0.1, =3.1.3, =3.1.3, =0.8.0-rc0, =0.8.0-rc0, =2.0.6, =2.2.1, =2.0.6, =2.1.0 Source cves: CVE-2026-29000 Source advisory: OSV:GHSA-PM7G-W2CF-Q238...

com.efluid.oss:efluid-datagate-app (>=1.0.0-beta-21, <=3.1.1), com.efluid.oss:efluid-datagate-app-cucumber (>=1.0.0-beta-21, <=3.1.1) potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (3.3.0)

org.pac4j:pac4j-jwt MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-jwt and may be impacted: - com.efluid.oss:efluid-datagate-app =1.0.0-beta-21, =1.0.0-beta-21, =3.1.1 Source cves: CVE-2026-29000 Source advisory:...

com.efluid.oss:efluid-datagate-app (>=3.1.3, <=6.1.5), com.efluid.oss:efluid-datagate-app-cucumber (>=3.1.3, <=6.1.5) +5 more potentially affected by CVE-2026-29000 via org.pac4j:pac4j-jwt (>=5.0.1, <=5.7.8)

org.pac4j:pac4j-jwt MAVEN version =5.0.1, =3.1.3, =3.1.3, =0.8.0-rc0, =0.8.0-rc0, =2.0.6, =2.2.1, =2.0.6, =2.1.0 Source cves: CVE-2026-29000 Source advisory: MEND:CVE-2026-29000...

CVE-2019-12774

A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044update05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description...

CVE-2019-12775

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. Furthermore, the user account that controls the web...

CVE-2019-12777

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They replace secure and protected directory permissions set as default by the underlying operating system with highly insecure read, write, and execute directory...

EUVD-2019-4358

Malware in sbrugna...

PT-2025-27801 · Asna · Asna Registrar +16

Name of the Vulnerable Software and Affected Versions: ASNA Assist versions prior to 2025-03-31 ASNA Registrar versions prior to 2025-03-31 DataGate for SQL Server versions 17.0.36.0 and 16.0.89.0 DataGate Component Suite versions 17.0.36.0 and 16.0.89.0 DataGate Monitor versions 17.0.26.0 and...

com.efluid.oss:efluid-datagate-app (>=5.1.7, <=5.1.14), com.efluid.oss:efluid-datagate-app-cucumber (>=5.1.7, <=5.1.14) +8 more potentially affected by CVE-2023-45860 via com.hazelcast:hazelcast (4.1.8)

com.hazelcast:hazelcast MAVEN version 4.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.efluid.oss:efluid-datagate-app =5.1.7, =5.1.7, =4.32.0, =3.11.5, =3.11.7 Source cves: CVE-2023-45860 Source...

datagate-i.com Improper Access Control vulnerability OBB-2149455

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

datagate.ee Cross Site Scripting vulnerability OBB-2129820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ENTTEC Lighting Controllers (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: ENTTEC Equipment: Datagate Mk2, Storm 24, Pixelator, E-Streamer Mk2 Vulnerabilities: Use of Hard-coded Cryptographic Key, Cross-site Scripting, Improper Access Control...

ENTTEC Datagate Mk2 Cross-Site Scripting Vulnerability

The ENTTEC Datagate MK2 is a lighting controller from ENTTEC Australia. A cross-site scripting vulnerability exists in the Web Configuration feature in the ENTTEC Datagate Mk2 70044update05032019-482 release. The vulnerability stems from the WEB application lacking proper validation of client dat...

Authentication flaw

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They allow high-privileged root access by www-data via sudo without requiring appropriate access control. Furthermore, the user account that controls the web...

Cross site scripting

A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044update05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description...

CVE-2019-12774

A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044update05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description...

CVE-2019-12774

A number of stored XSS vulnerabilities have been identified in the web configuration feature in ENTTEC Datagate Mk2 70044update05032019-482 that could allow an unauthenticated threat actor to inject malicious code directly into the application. This affects, for example, the Profile Description...