79 matches found
CVE-2026-12571
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-12571
The CVE-2026-12571 entry describes an authentication bypass in ManageEngine DDI Central’s password-reset workflow that enables account takeover. The NVD entry confirms a critical impact (CVSS 3.1: 9.8, NETWORK attack vector, no user interaction) with high impact on confidentiality, integrity, and...
CVE-2026-12571 Authentication Bypass Leading to Account Takeover
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
EUVD-2026-56557
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-12571 Authentication Bypass Leading to Account Takeover
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
CVE-2026-12571: Improper Authentication
An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover...
PT-2026-70365
Name of the Vulnerable Software and Affected Versions ManageEngine DDI Central affected versions not specified Description An authentication bypass exists in the password-reset workflow, which could allow an attacker to perform an account takeover. Recommendations At the moment, there is no...
CVE-2026-43477
In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabling TRANSDDIFUNCCTL Apparently ICL may hang with an MCE if we write TRANSVRRVMAX/FLIPLINE before enabling TRANSDDIFUNCCTL. Personally I was only able to reproduce a hang on an Dell X...
Linux Distros Unpatched Vulnerability : CVE-2026-43477
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/vrr: Configure VRR timings after enabling TRANSDDIFUNCCTL Apparently ICL may hang with an MCE if we write TRANSVRRVMAX/FLIPLINE before enabling...
CVE-2023-7330: Unrestricted Upload of File with Dangerous Type
Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of...
EUVD-2025-23795
Malicious code in bioql PyPI...
EUVD-2025-23793
Malicious code in bioql PyPI...
EUVD-2024-24527
Malicious code in bioql PyPI...
EUVD-2025-12209
Malicious code in bioql PyPI...
EUVD-2024-46684
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-31612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a local user with basic...
CVE-2025-27067
Memory corruption while processing DDI call with invalid buffer...
CVE-2025-27069
Memory corruption while processing DDI command calls...