3930 matches found
CVE-2025-9312
CVE-2025-9312 relates to a missing authentication enforcement in WSO2 products’ mTLS implementation used by System REST APIs and SOAP services. The root cause is improper validation of client certificate–based authentication under certain default configurations, allowing unauthenticated requests ...
EUVD-2025-197988
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
CVE-2025-9312 Improper Certificate-Based Authentication Enforcement in Multiple WSO2 Products
A missing authentication enforcement vulnerability exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services in multiple WSO2 products. Due to improper validation of client certificate–based authentication in certain default configurations, the affected components ma...
PT-2025-47304
Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description A missing authentication enforcement issue exists in the mutual TLS mTLS implementation used by System REST APIs and SOAP services. Improper validation of client certificate–based...
PT-2025-47046
Name of the Vulnerable Software and Affected Versions D-Link DIR-816L version 2 06 b09 beta Description A stack-based buffer overflow exists in the soapcgi main function of the /soap.cgi file. This issue allows for remote exploitation. The exploit has been publicly disclosed. The affected product...
EUVD-2025-180238
Malicious code in auriga-parcel-soap-nashira npm...
EUVD-2025-175852
Malicious code in uglify-js-buffer-exosphere-soap npm...
EUVD-2025-176606
Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin npm...
EUVD-2025-175854
Malicious code in typeorm-xanthus-solis-soap npm...
EUVD-2025-176324
Malicious code in soap-auth0-tailwindcss-convict npm...
EUVD-2025-176323
Malicious code in soap-callback-convict-middleware npm...
EUVD-2025-177063
Malicious code in prettier-stylelint-soap-acamar-build npm...
EUVD-2025-176841
Malicious code in quasar-robotics-soap-winston npm...
EUVD-2025-176017
Malicious code in telesto-spectron-sagitta-soap npm...
Malicious code in lepton-cache-soap-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a8b1aab1653ea9186f5db7ed0ff5ad6f8e7fb307f940830c94da18ed1a149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178990
Malicious code in exec-supernova-soap-mongoose npm...
EUVD-2025-176317
Malicious code in soap-slidev-carpo-restart npm...