Lucene search
+L

10387 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/15 8:03 a.m.•13 views

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service, cross-site scripting, and security bypass vulnerabilities

Summary Apache Commons FileUpload, Servlet feature, adminCenter feature, and JMS messaging are used by IBM Operations Analytics - Log Analysis as part of handling file uploads, web applications CVE-2025-48976, CVE-2025-36047, administrative centre CVE-2025-36000, asynchronous communication using...

7.5CVSS6.6AI score0.32877EPSS
SaveExploits1Affected Software1
Github Security Blog
Github Security Blog
•added 2025/10/14 4:35 a.m.•5 views

Malware in analytics-data-collection-fe

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2025/10/14 4:35 a.m.•9 views

Malicious Package

Overview analytics-data-collection-fe is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/12 8:47 a.m.•16 views

Malicious code in analytics-data-collection-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5655e480e57af4b115f0660b3e96f7412f5d95816cd49858611d28761ea501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/12 8:47 a.m.•13 views

EUVD-2025-33891

Malicious code in analytics-data-collection-fe npm...

6.6AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/10/12 8:47 a.m.•14 views

MAL-2025-48316 Malicious code in analytics-data-collection-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5655e480e57af4b115f0660b3e96f7412f5d95816cd49858611d28761ea501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/10/10 6:10 p.m.•13 views

Malicious code in vue-analytics-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6264af628cc0d76e732dffe05db10a0bd52bcffaad0549e986349c8fc542cf79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/10 6:10 p.m.•13 views

EUVD-2025-33765

Malicious code in vue-analytics-plugin npm...

6.6AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/10/10 6:10 p.m.•12 views

MAL-2025-48313 Malicious code in vue-analytics-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6264af628cc0d76e732dffe05db10a0bd52bcffaad0549e986349c8fc542cf79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/10 12:00 a.m.•21 views

HP Touchpoint Analytics Symbolic Link

The vulnerability of the HP Touchpoint Analytics performance monitoring application relates to the improper handling of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.1CVSS6.5AI score0.00207EPSS
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2025/10/09 11:45 p.m.•9 views

Malicious Package

Overview phoenix-analytics is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/09 11:45 p.m.•3 views

Malware in phoenix-analytics

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/09 9:04 p.m.•6 views

CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability

...

9.3CVSS5.8AI score0.0045EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/09 9:04 p.m.•35 views

CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability

...

9.3CVSS0.0045EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/10/09 2:00 p.m.•22 views

Azure Monitor Log Analytics Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Monitor allows an unauthorized attacker to perform spoofing over a network...

9.3CVSS5.8AI score0.0045EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2025/10/09 6:58 a.m.•35 views

Security Bulletin: Due to use of Apache Commons, IBM Operations Analytics - Log Analysis is affected by Improper Handling of Untrusted Input During Deserialization

Summary Apache Commons is used by IBM Operations Analytics - Log Analysis as part of the configuration parsing in Apache Solr CVE-2017-15708, CVE-2019-13116 and Java Deserialization CVE-2015-4852, CVE-2015-6420, CVE-2015-7501 Vulnerability Details CVEID:CVE-2015-4852 DESCRIPTION: The WLS Security...

10CVSS8.2AI score0.94991EPSS
SaveExploits28Affected Software1
Kaspersky
Kaspersky
•added 2025/10/09 12:00 a.m.•32 views

KLA89197 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Entra ID can be exploited remotely to gain privilege...

9.8CVSS7.8AI score0.076EPSS
SaveExploits0References11
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-2050

Malware in sbrugna...

8CVSS7.7AI score0.00994EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2018-14983

Malware in sbrugna...

8.1CVSS7.7AI score0.01636EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2021-25323

Malware in sbrugna...

8.8CVSS6AI score0.00566EPSS
SaveExploits0References4
Rows per page
Query Builder