3751 matches found
MAL-2024-7431 Malicious code in portal-ui-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ed4030d37e53e09fa9a44db9742e1fde7399bd6de75e13e86d290b88a22251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7415 Malicious code in compiler-wasm-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3e3404f77486c9124e70890333cce19382125d07dac40b2ed4b87a466c855e The OpenSSF Package Analysis project identified 'compiler-wasm-lib' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
GHSA-VG6V-JCG3-5MP7 @aofl/cli-lib Prototype Pollution vulnerability
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
@aofl/cli-lib Prototype Pollution vulnerability
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38987
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38987
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38987
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38987
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
CVE-2024-38987: Improperly Controlled Modification of Object Prototype Attributes
aofl cli-lib v3.14.0 was discovered to contain a prototype pollution via the component defaultsDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
The vulnerability of the ExtractImageSection() function in the LibTIFF library, which allows a hacker to cause a service failure.
The vulnerability of the ExtractImageSection function in the LibTIFF library is related to the copying of buffers without checking the input size. Exploiting this vulnerability could allow an attacker to cause a service failure using the created Tiff file...
Malicious code in curly-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6846 Malicious code in curly-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6820 Malicious code in cards-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6637 Malicious code in appium-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in panda-lib (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5451 Malicious code in panda-lib (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3074 Malicious code in symphony-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d173722bd09e0ce0c234f33cbeefd7066a3b8e6d046e120a058936146dd1109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in symphony-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d173722bd09e0ce0c234f33cbeefd7066a3b8e6d046e120a058936146dd1109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...