MINI-3FG4-J956-QWVM

Bulletin has no description...

MINI-VQH4-WQ9J-7Q59

Bulletin has no description...

CVE-2026-1621

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

MINI-23JH-C53P-R3C2

Bulletin has no description...

CVE-2026-1621

Technical details about CVE-2026-1621 are not publicly available in the provided documents. Monitor for updates from official advisories; current entries only reiterate an authentication bypass in Universal Software Inc. E-Municipality with no specifics.

CVE-2026-1621

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

CVE-2026-1621 Register Bypass in Universal Sotware's E-Municipality

Authentication bypass by primary weakness vulnerability in Universal Software Inc. E-Municipality allows Exploitation of Trusted Identifiers. This issue affects E-Municipality: from 20251127 before 20260204...

MINI-W7CF-29JW-7MJG

Bulletin has no description...

MINI-7W52-QXRG-4XC3

Bulletin has no description...

SQL Injection

Spring Data Relational is vulnerable to SQL Injection. The vulnerability is due to insufficient escaping of wildcard characters in user-controlled input, which allows an attacker to inject wildcard patterns and perform boolean-based blind data inference...

Malicious code in utils-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thepackagethatworks_ (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress GiveWP plugin <= 4.16.5.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Dthangws in WordPress Plugin GiveWP versions = 4.16.5.1...

GO-2025-4261 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GO-2026-5887 vulnerabilities

Vulnerabilities for packages: gatus, gatus-fips...

GO-2026-4753 vulnerabilities

Vulnerabilities for packages: mattermost-fips, neuvector, omni, gotrue-fips, zitadel, rancher-agent, dex, dex-fips, omni-fips, gotrue, commercial-grafana, teleport-operator-fips, neuvector-fips, teleport, rancher, mattermost...

GO-2026-5224 vulnerabilities

Vulnerabilities for packages: authentik-fips, cloudbeat-fips, vault-fips, rancher-agent, azure-service-operator-fips, azure-service-operator, authentik, cloudbeat, rancher, vault...

GO-2025-3367 vulnerabilities

Vulnerabilities for packages: task, go-licenses, kubevela, gitsign, kyverno, packer-fips, pulumi-kubernetes-operator, scorecard, pulumi-language-java, trivy, kaniko-fips, kaniko, zot, melange, amazon-ssm-agent, crossplane, chainctl, tfsec, zarf, kargo, gitea, timoni, guac, argo-cd, syft, chezmoi,...

GO-2026-5597 vulnerabilities

Vulnerabilities for packages: telegraf, chainloop-cli, kyverno, scorecard, packer-fips, argo-cd-fips, amazon-ssm-agent, rclone, terragrunt-fips, teleport, grafana, chainloop-cli-fips, cerbos, terragrunt, external-secrets-operator, argo-cd, grafana-fips, syft, skaffold-fips, seaweedfs-rocksdb,...

GO-2026-4602 vulnerabilities

Vulnerabilities for packages: gotenberg, contour, azcopy, amazon-cloudwatch-agent-operator, mcp-grafana, step-kms-plugin-fips, kubeflow-pipelines, aws-nuke-fips, karma, fleet-server-fips, mcp-grafana-fips, rabbitmq-cluster-operator-fips, request-1279-14, gendesk, prometheus-statsd-exporter-fips,...