255164 matches found
MINI-PWW5-JH87-Q7G7
Bulletin has no description...
MINI-93C2-42J7-C6CM
Bulletin has no description...
MINI-P8HG-79JJ-GH59
Bulletin has no description...
MINI-V23G-6HJ8-4JCV
Bulletin has no description...
MINI-487W-W495-J5CC
Bulletin has no description...
MINI-2QPM-VQGV-JVQ5
Bulletin has no description...
CGA-RM7P-VR95-GRW6
Bulletin has no description...
CGA-HFX7-7F35-J2CP
Bulletin has no description...
CGA-948C-7QF2-8M8V
Bulletin has no description...
MAL-2026-15569 Malicious code in nuvyra-marketplace-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db08e65aec25f1dc4fd0c33173154dbd0e6ef6e79aa2f1b7f8b4f8df0b9a3a8 dist/client.js executes initializeProvider at module top level, so the code runs whenever a consumer requires or imports this SDK. The function...
CGA-R44G-HRJR-GVV5
Bulletin has no description...
DEBIAN-CVE-2026-82467
Rodauth before 2.47.0 fails to validate protocol-relative return-to paths in confirmpassword, loginreturntorequestedlocation, and twofactorauthreturntorequestedlocation features. Attackers can craft paths with leading double slashes that browsers resolve as protocol-relative URLs, redirecting...
DEBIAN-CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
DEBIAN-CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...
DEBIAN-CVE-2026-82468
Rodauth before 2.47.0 contains a cross-site request forgery protection bypass vulnerability in the JSON request content type validation. Attackers can craft cross-origin form posts with content types containing application/json substrings to bypass CSRF token validation and force victims to...
DEBIAN-CVE-2026-82469
Rodauth before 2.47.0 contains an authentication bypass vulnerability in the jwtrefresh route that issues new JWT access tokens without requiring a refresh token. Attackers can present an access token to the refresh route via non-POST methods to obtain a new valid access token, enabling indefinit...
DEBIAN-CVE-2026-82466
Rodauth before 2.46.0 contains an authentication bypass vulnerability in the webauthnlogin route that allows logged-in users to authenticate as any other account. Attackers can exploit improper account resolution logic that falls back to session account identifiers instead of validating the...
MINI-RG6R-958H-55XX
Bulletin has no description...