75387 matches found
ECHO-744A-B1B6-3B08
Bulletin has no description...
ECHO-982A-B792-20E6
Bulletin has no description...
ECHO-7C1A-8BF4-2138
Bulletin has no description...
ECHO-883A-A20E-E25B
Bulletin has no description...
ECHO-B0A8-C77A-9825
Bulletin has no description...
ECHO-742C-EB65-94D8
Bulletin has no description...
ECHO-B02A-9509-4828
Bulletin has no description...
ECHO-29A1-0646-4AEF
Bulletin has no description...
ECHO-F674-800D-F783
Bulletin has no description...
ECHO-961F-1EC5-51A7
Bulletin has no description...
CVE-2026-71327
A flaw was found in Traefik, an open-source HTTP reverse proxy and load balancer. Its Kubernetes Gateway API provider incorrectly generates unique identifiers for routes and services. This vulnerability allows an attacker to create conflicting routes, which can then overwrite the backend services...
CVE-2026-81031 IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update
IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js resolves the authenticated user from the request that the token middlewa...
CVE-2026-81031
CVE-2026-81031 affects IDURAR ERP CRM through version 4.1.1 . The vulnerability resides in the password update handler (updatePassword.js), which applies a password change to the identifier in the URL path rather than verifying it matches the authenticated user. Because the route requires only a ...
EUVD-2026-66607
IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js resolves the authenticated user from the request that the token middlewa...
CVE-2026-81031 IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update
IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js resolves the authenticated user from the request that the token middlewa...
CVE-2026-81031 IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update
IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controllers/middlewaresControllers/createUserController/updatePassword.js resolves the authenticated user from the request that the token middlewa...
MINI-VQXV-7VFR-P46F
Bulletin has no description...
MINI-5CVW-86PH-MP3X
Bulletin has no description...
