MAL-2025-16567 Malicious code in carrot-xerophyte-jhu6 (npm)

The package carrot-xerophyte-jhu6 was found to contain malicious code...

CVE-2017-16567

creationtimestamp| type| source ---|---|--- 2025-02-06 02:41:38+00:00| seen| Telegram/FYoOOrvfbSA-l0m2s9kGLWsMr7AfGmsVlmIk9H10c0SXA7x...

CVE-2019-16567

A missing permission check in Jenkins Team Concert Plugin 1.3.0 and earlier in form-related methods allowed users with Overall/Read access to enumerate credentials ID of credentials stored in Jenkins...

CVE-2019-16567

CVE-2019-16567 affects Jenkins Team Concert Plugin 1.3.0 and earlier. A missing permission check in form-related methods lets users with Overall/Read access enumerate credential IDs stored in Jenkins. Impact: credential enumeration; no exploitation details provided. Mitigation: upgrade/patch to a...

CVE-2018-16567

...

CVE-2018-16567

CVE-2018-16567 is rejected and not used; it does not represent an active vulnerability.

CVE-2017-16567

Persistent Cross-Site Scripting XSS vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. This vulnerability allows remote attackers to inject and permanently store malicious JavaScript payloads, which are executed when users access the affected functionality...

CVE-2017-16567

CVE-2017-16567 is a stored cross-site scripting vulnerability in Logitech Media Server 7.9.0 affecting the Favorites feature. The issue allows remote attackers to inject and permanently store malicious JavaScript that executes when users access the affected UI, enabling session hijacking, credent...