EUVD-2022-33890

Malicious code in bioql PyPI...

EUVD-2024-36393

Malicious code in bioql PyPI...

CVE-2025-49603

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

CVE-2025-49603

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

CVE-2025-49603

CVE-2025-49603 concerns improper access control in Northern.tech Mender Server . Affected are versions prior to 3.7.11 and prior to 4.0.1 (4.x). The root cause is described as Incorrect Access Control , with public sources noting an issue affecting device groups in Mender Server. The CVSS 3.1 bas...

CVE-2025-49603

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

Northern.tech Mender Server 安全漏洞

Northern.tech Mender Server is an IoT server-side software from Northern.tech, USA. A security vulnerability exists in Northern.tech Mender Server versions prior to 3.7.11 and prior to 4.0.1 that stems from improper access control...

PT-2025-27004 · Unknown · Mender Server

Name of the Vulnerable Software and Affected Versions: Mender Server versions 3.7.11 and earlier, 4.x versions prior to 4.0.1 Description: The issue is related to Incorrect Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or...

CVE-2025-49603

Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...

CVE-2022-32290

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...

CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...

CVE-2022-29555

The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking...

CVE-2022-45929

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...