CVE-2026-110114

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...

CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...

CVE-2026-110114

The FJ-OMS oms-erp through PRE application is vulnerable to a missing authentication flaw within the skyer-goods component. Unauthenticated attackers can access public es-test maintenance endpoints, specifically by requesting /v1/goods/sku/es-test . This allows for the deletion and rebuilding of ...

CVE-2026-110114 oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...

CVE-2026-110114: Missing Authentication for Critical Function

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-test maintenance endpoints in skyer-goods. Attackers can repeatedly request /v1/goods/sku/es-test to empty the shared...

django-allauth-d120 (0.0.3), meine-stadt-transparent (0.2.4) +6 more potentially affected by CVE-2026-27982 via django-allauth (0.41.0)

django-allauth PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-allauth-d120 0.0.3 - meine-stadt-transparent 0.2.4 - oms-cms 0.9.9 - openwisp-ipam 0.1.0 - openwisp-network-topology =0.3.0,...

django-allauth-d120 (0.0.3), meine-stadt-transparent (0.2.4) +6 more potentially affected by CVE-2025-65431 via django-allauth (0.41.0)

django-allauth PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-allauth and may be impacted: - django-allauth-d120 0.0.3 - meine-stadt-transparent 0.2.4 - oms-cms 0.9.9 - openwisp-ipam 0.1.0 - openwisp-network-topology =0.3.0,...

EUVD-2022-42266

Malicious code in bioql PyPI...

MAL-2025-12822 Malicious code in @zalastax/nolb-oms (npm)

The package @zalastax/nolb-oms was found to contain malicious code...

Malicious code in @zalastax/nolb-oms (npm)

The package @zalastax/nolb-oms was found to contain malicious code...

CVE-2022-39816

In NOKIA 1350 OMS R14.2, Insufficiently Protected Credentials cleartext administrator password occur in the edit configuration page. Exploitation requires an authenticated attacker...

CVE-2022-39817

In NOKIA 1350 OMS R14.2, multiple SQL Injection vulnerabilities occurs. Exploitation requires an authenticated attacker. Through the injection of arbitrary SQL statements, a potential authenticated attacker can modify query syntax and perform unauthorized and unexpected operations against the...

CVE-2022-39819

In NOKIA 1350 OMS R14.2, multiple OS Command Injection vulnerabilities occurs. This allows authenticated users to execute commands on the operating system...

Malware in oms-frontend

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in oms-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096fa8375c3d3d18ad7f109d5bcc12864480bd78ba8892401bc853554469accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10763 Malicious code in oms-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096fa8375c3d3d18ad7f109d5bcc12864480bd78ba8892401bc853554469accc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

oms-antrieb.de Improper Access Control vulnerability OBB-3776956

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-40714

An issue was discovered in NOKIA 1350OMS R14.2. Reflected XSS exists under different /oms1350/ endpoints...

NOKIA 1350 OMS Path Traversal Vulnerability

NOKIA 1350 OMS is an optical management system from the Finnish company Nokia NOKIA. A security vulnerability exists in NOKIA 1350 OMS version R14.2. An attacker can exploit the vulnerability to arbitrarily read files on the file system...

NOKIA 1350 OMS Path Traversal Vulnerability

NOKIA 1350 OMS is an optical management system from the Finnish company Nokia NOKIA. A security vulnerability exists in NOKIA 1350 OMS version R14.2. An attacker can exploit the vulnerability to arbitrarily read files on the file system...