Lucene search
+L

1621 matches found

OSV
OSV
•added 2023/03/31 2:16 a.m.•15 views

MAL-2023-835 Malicious code in tdv2-applet-featurebar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9d2dbbac5b3d226becbb379b83d7348a2fd220425d70d215310baf04711931d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/03/31 2:16 a.m.•7 views

Malicious code in tdv2-applet-search-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e022c3efe7e835b45fddf0e6d3e78494e10cf44eae43cfdc147cadbe25d7dc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/03/31 2:16 a.m.•12 views

MAL-2023-840 Malicious code in tdv2-applet-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44d9f0f475f31c69d603b6953d97d1b896179620b901a811fd032be0a22d9003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/03/31 2:16 a.m.•16 views

MAL-2023-839 Malicious code in tdv2-applet-sports-media (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d5a83b834f080ac2d6014a13d98f1f971219a3547e4ffce139f6a9dea8b26ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/03/31 2:16 a.m.•13 views

MAL-2023-841 Malicious code in tdv2-applet-stream-her (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f1a3a4e828660101ffe77b0a2ddc778e1877603d971ba4e76e4f7d85692a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Fedora
Fedora
•added 2023/02/25 3:47 a.m.•21 views

[SECURITY] Fedora 37 Update: plasma-nm-5.27.1-1.fc37

Plasma applet and editor for managing your network connections in KDE 4 using the default NetworkManager service...

7.3AI score
SaveExploits0
OSV
OSV
•added 2023/02/21 2:15 p.m.•13 views

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

9.8CVSS6.1AI score0.00761EPSS
SaveExploits1References1
Prion
Prion
•added 2023/02/21 2:15 p.m.•27 views

Sql injection

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

7.5CVSS10AI score0.00761EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/02/21 12:00 a.m.•14 views

znfit Home improvement ERP management system SQL注入漏洞

znfit Home improvement ERP management system is a home ERP management system from znfit Shanghai, China. A security vulnerability exists in znfit Home improvement ERP management system version V5020220207, v42. An attacker exploited the vulnerability to execute arbitrary sql commands via the...

9.8CVSS9AI score0.00761EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•5 views

CVE-2022-45564: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

9.8CVSS6.4AI score0.00761EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/21 12:00 a.m.•13 views

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

10AI score0.00761EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/02/21 12:00 a.m.•6 views

PT-2023-14707

Name of the Vulnerable Software and Affected Versions znfit Home improvement ERP management system versions V42 through V50 20220207 Description The issue allows attackers to execute arbitrary SQL commands via the userCode parameter to the WeChat applet, potentially leading to unauthorized data...

9.8CVSS0.00761EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/02/21 12:00 a.m.•47 views

CVE-2022-45564

SQL Injection vulnerability in znfit Home improvement ERP management system V5020220207,v42 allows attackers to execute arbitrary sql commands via the userCode parameter to the wechat applet...

10AI score0.00761EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2023/02/15 6:16 a.m.•18 views

SUSE CVE-2005-3946

Opera 8.50 allows remote attackers to cause a denial of service crash via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class...

5CVSS6.8AI score0.03232EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:13 a.m.•16 views

SUSE CVE-2006-6736

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

4.3CVSS6.8AI score0.02447EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 6:12 a.m.•10 views

SUSE CVE-2007-2022

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information browser keystrokes, which are leaked to the Flash Player applet...

6.8CVSS6.7AI score0.04333EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 6:11 a.m.•15 views

SUSE CVE-2007-3922

Unspecified vulnerability in the Java Runtime Environment JRE Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.214 and earlier, allows remote attackers to violate the security model for an applet's outbound connections by connecting to...

6.8CVSS6.9AI score0.0286EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 6:10 a.m.•16 views

SUSE CVE-2007-5232

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when applet caching is enabled, allows remote attackers to violate the security model for an applet's outbound...

4CVSS6.9AI score0.03418EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 6:10 a.m.•10 views

SUSE CVE-2007-5273

Sun Java Runtime Environment JRE in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier, when an HTTP proxy server is used, allows remote attackers to violate the security model for an applet's outbound...

2.6CVSS6.7AI score0.02678EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 6:09 a.m.•16 views

SUSE CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...

10CVSS7.3AI score0.02839EPSS
SaveExploits0References6
Rows per page
Query Builder