MINI-9J63-W3W3-467C

Bulletin has no description...

MINI-VG9V-QWJ4-MPQP

Bulletin has no description...

MINI-78H8-XWF2-CMF3

Bulletin has no description...

MINI-JW4G-MW3F-G6V5

Bulletin has no description...

MINI-XVHJ-JP82-7HGV

Bulletin has no description...

Security Bulletin: Code Injection Vulnerability in Code Validation Endpoint

Summary A code injection vulnerability was identified in the code validation endpoint that allowed authenticated users to execute arbitrary code on the server. The vulnerability existed in the validation logic which compiled and executed function definitions to check for import errors. Attackers...

MINI-3X2Q-CXMQ-J734

Bulletin has no description...

MINI-3PF8-X77C-42W4

Bulletin has no description...

MINI-4J8F-RV4R-P2V2

Bulletin has no description...

MINI-GXP6-W485-9PF9

Bulletin has no description...

MINI-5455-PMG3-WVCX

Bulletin has no description...

CGA-M9G6-2M56-H573

Bulletin has no description...

ROOT-APP-MAVEN-CVE-2026-5795 CVE-2026-5795 in org.eclipse.jetty.ee10:jetty-ee10-jaspi - Patched by Root

Root has patched CVE-2026-5795 in the org.eclipse.jetty.ee10:jetty-ee10-jaspi package for Root:Maven. Multiple fixed versions available...

CVE-2026-72815

The CVE-2026-72815 affects go-chi chi v5.2.1 up to, but not including, v5.3.0. The RealIP middleware blindly trusts the leftmost value of X-Forwarded-For, enabling an attacker to bypass IP-based ACLs and rate limits and forge log entries by spoofing the IP address. The issue is fixed in v5.3.0. R...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Software have been addressed in version 1.0.2.0. Vulnerability Details CVEID:CVE-2025-47273 DESCRIPTION: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability ...

GO-2025-3595 vulnerabilities

Vulnerabilities for packages: consul, yunikorn-k8shim, kyverno-policy-reporter-kyverno-plugin, fq, x509-certificate-exporter, authservice, k8ssandra-client-fips, kubeflow-fips, prometheus-podman-exporter, terraform-provider-time-fips, cilium-envoy-fips, crossplane-provider-aws-eks,...

WordPress Prevent Direct Access - Protect WordPress Files plugin <= 2.8.8.8 - Unauthenticated Protected File Access vulnerability

WordPress Prevent Direct Access - Protect WordPress Files plugin = 2.8.8.8 - Unauthenticated Protected File Access vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Prevent Direct Access versions = 2.8.8.8...

Atlassian Bitbucket - Remote Command Injection

Atlassian Bitbucket Server and Data Center is susceptible to remote command injection. Multiple API endpoints can allow an attacker with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request, thus making it possible to obtain...

VMware NSX SD-WAN Edge - Command Injection

VMware NSX SD-WAN Edge formerly VeloCloud Edge before 3.1.2 contains an unauthenticated command injection in the local web UI diagnostic tools Ping/Traceroute. This template detects it reliably by injecting 'id', 'whoami', and a random marker. id: CVE-2018-6961 info: name: VMware NSX SD-WAN Edge ...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...