MINI-5399-F47V-R3GV

Bulletin has no description...

MINI-3FG4-J956-QWVM

Bulletin has no description...

MINI-VQH4-WQ9J-7Q59

Bulletin has no description...

CVE-2026-1621

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

MINI-23JH-C53P-R3C2

Bulletin has no description...

CVE-2026-1621 Register Bypass in Universal Sotware's E-Municipality

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

CVE-2026-1621

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

CVE-2026-1621

Technical details about CVE-2026-1621 are not publicly available in the provided documents. Monitor for updates from official advisories; current entries only reiterate an authentication bypass in Universal Software Inc. E-Municipality with no specifics.

MINI-W7CF-29JW-7MJG

Bulletin has no description...

MINI-7W52-QXRG-4XC3

Bulletin has no description...

SQL Injection

Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...

Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-5887 vulnerabilities

Vulnerabilities for packages: gatus, gatus-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: teleport-operator-fips, zitadel, mattermost, commercial-grafana, dex-fips, omni-fips, gotrue-fips, neuvector-fips, rancher-agent, mattermost-fips, rancher, neuvector, omni, dex, teleport, gotrue...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: authentik, vault, vault-fips, cloudbeat-fips, cloudbeat, rancher, azure-service-operator-fips, azure-service-operator, authentik-fips, rancher-agent...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: scorecard, syft, terragrunt-fips, flux-fips, cerbos, amazon-ssm-agent, skaffold-fips, seaweedfs-rocksdb-fips, nemo, teleport, telegraf, packer-fips, rancher-fleet, gitlab-rails-ce, rancher-fleet-fips, argo-cd, gitaly, external-secrets-operator,...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: pulumi, scorecard, kaniko-fips, go-licenses, flux-image-automation-controller, snyk-cli, src-fingerprint-fips, syft, gitea, gptscript, k8sgpt, flux-source-controller-fips, kargo, argo-workflows, tekton-pipelines, grafana-alloy, amazon-ssm-agent, bom,...