Lucene search
K

172 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/16 10:13 a.m.3 views

Malicious code in npm-demoo-1111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2199a37f518fbd8345def58b16a83c07aaf6aae9b837f6ec6d96a179f97849 The package npm-demoo-1111 was found to contain malicious code. Source: ghsa-malware 12073b21cd21241e9d8a004221c9e22d323091d95e7b5b9bdde2f1b20883aea4...

5.7AI score
Exploits0References1
OSV
OSV
added 2026/03/16 10:13 a.m.2 views

MAL-2026-1462 Malicious code in npm-demoo-1111 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c2199a37f518fbd8345def58b16a83c07aaf6aae9b837f6ec6d96a179f97849 The package npm-demoo-1111 was found to contain malicious code. Source: ghsa-malware 12073b21cd21241e9d8a004221c9e22d323091d95e7b5b9bdde2f1b20883aea4...

5.7AI score
Exploits0References1
OpenVAS
OpenVAS
added 2026/02/02 12:0 a.m.2 views

Huawei EulerOS: Security Advisory for elfutils (EulerOS-SA-2026-1111)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.4AI score0.00142EPSS
Exploits4References2
Circl
Circl
added 2026/01/18 7:57 a.m.4 views

CVE-2026-1111

creationtimestamp| type| source ---|---|--- 2026-01-18 07:57:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mconrerpya2v...

7.2CVSS5.8AI score0.00198EPSS
Exploits2References1
CVE
CVE
added 2026/01/18 5:32 a.m.10 views

CVE-2026-1111

Summary: CVE-2026-1111 affects Sanluan PublicCMS, version pre-5.202506.d, via path traversal in the Save function of TaskTemplateAdminController.java (com/publiccms/controller/admin/sys/TaskTemplateAdminController.java, Task Template Management Handler). The vulnerability arises from manipulation...

7.2CVSS6.5AI score0.00198EPSS
Exploits2References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.3 views

MiracleLinux 7 : dhcp-4.2.5-68.1.0.1.el7.AXS7 (AXSA:2018-3100:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3100:04 advisory. A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Asianux Server. A malicious DHCP server, ...

7.9CVSS8.1AI score0.88233EPSS
Exploits14References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.1 views

MiracleLinux 4 : dhcp-4.1.1-53.P1.4.0.1.AXS4 (AXSA:2018-3101:02)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3101:02 advisory. A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Asianux Server. A malicious DHCP server, ...

7.9CVSS8.1AI score0.88233EPSS
Exploits14References2
RedhatCVE
RedhatCVE
added 2025/05/22 5:39 p.m.3 views

CVE-2020-1111

An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service, aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1121, CVE-2020-1165, CVE-2020-1166...

7.8CVSS6.5AI score0.00274EPSS
Exploits0References1
Circl
Circl
added 2024/01/31 8:31 p.m.1 views

CVE-2024-1111

creationtimestamp| type| source ---|---|--- 2024-01-31 20:31:24+00:00| seen| https://t.me/ctinow/177057 2024-02-22 14:42:17+00:00| seen| https://t.me/ctinow/190761...

6.1CVSS4.7AI score0.00122EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/01/31 7:0 p.m.4 views

CVE-2024-1111 SourceCodester QR Code Login System add-user.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester QR Code Login System 1.0. Affected by this issue is some unknown functionality of the file add-user.php. The manipulation of the argument qr-code leads to cross site scripting. The attack may be launched...

5CVSS4.8AI score0.00122EPSS
Exploits0References2
CVE
CVE
added 2024/01/31 7:0 p.m.32 views

CVE-2024-1111

The CVE-2024-1111 entry concerns SourceCodester QR Code Login System 1.0, where the issue affects the add-user.php file. The root cause is manipulation of the qr-code argument, enabling cross-site scripting (XSS). The vulnerability can be exploited remotely and impacts unknown functionality in ad...

6.1CVSS6AI score0.00122EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.3 views

SUSE CVE-2012-1111

lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or have other unspecified impact...

4.6CVSS6.7AI score0.00097EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2022/07/19 12:0 a.m.4 views

Huawei EulerOS: Livepatch Status QEMU

Reports the installed HotFixes for QEMU with their corresponding CVE Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.1 views

PT-2022-19375 · Jenkins · Jenkins Credentials Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Credentials Plugin versions 1111.v35a 307992395 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because the plugin does not escape the name and description of Credentials...

5.4CVSS5.5AI score0.00355EPSS
Exploits0References4
CVE
CVE
added 2022/04/04 7:46 p.m.97 views

CVE-2022-1111

CVE-2022-1111 affects GitLab CE/EE. The bug is a business-logic error in the Project Import feature that, under certain conditions, causes imported projects to display an incorrect user in the ‘Access Granted’ column on project membership pages. Affected versions include GitLab CE/EE 14.9 < 14...

3.5CVSS3.6AI score0.00197EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/02/28 2:36 a.m.1 views

CVE-2022-1111

creationtimestamp| type| source ---|---|--- 2022-02-28 02:36:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1551 2022-04-05 00:28:25+00:00| seen| https://t.me/cibsecurity/40140...

3.5CVSS4AI score0.00197EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/12 12:0 a.m.12 views

EulerOS Virtualization 3.0.6.6 : bluez (EulerOS-SA-2022-1111)

According to the versions of the bluez packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In BlueZ before 5.55, a double free was found in the gatttool disconnectcb routine from shared/att.c. A remote attacker could...

8.6CVSS7.5AI score0.02252EPSS
Exploits0References2
Packet Storm
Packet Storm
added 2022/01/06 12:0 a.m.400 views

Backdoor.Win32.SubSeven.c Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/bc7f4c4689f1b8ad395404d1e75c776f.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.SubSeven.c Vulnerability: Remote Stack Buffer Overflow Description: The malware liste...

0.5AI score
Exploits0
CVE
CVE
added 2021/08/11 9:33 p.m.79 views

CVE-2021-1111

The CVE-2021-1111 entry concerns NVIDIA Jetson bootloader (NV3P server). Affected components are bootloader code on Jetson Linux devices (Jetson AGX Xavier, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson Nano). The vulnerability arises from an incorrect bounds check in the bootloader ...

6.7CVSS6.4AI score0.00476EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2021:1111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References4
Rows per page
Query Builder