Malicious Package

Overview clementine-sdk is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in clementine-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a589617ff547a464cb26e7d9a5675151e221ab5d144088fbc60cb0fbe41135 The package clementine-sdk was found to contain malicious code. Source: ghsa-malware aee6ab0f050d475e499cb88539f229969e72affe6313b116693e5da3fa7c7a4c...

MAL-2026-3822 Malicious code in clementine-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a589617ff547a464cb26e7d9a5675151e221ab5d144088fbc60cb0fbe41135 The package clementine-sdk was found to contain malicious code. Source: ghsa-malware aee6ab0f050d475e499cb88539f229969e72affe6313b116693e5da3fa7c7a4c...

EUVD-2018-6254

Malware in sbrugna...

EUVD-2021-27987

Malicious code in bioql PyPI...

EUVD-2021-27988

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-40826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207...

Linux Distros Unpatched Vulnerability : CVE-2024-50986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. CVE-2024-50986 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2021-40827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Clementine Music Player through 1.3.1 when a GLib 2.0.0 DLL is used is vulnerable to a Read Access Violation on Block Data Move, affecting the MP3 file parsing...

Linux Distros Unpatched Vulnerability : CVE-2018-14332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Clementine Music Player 1.3.1. Clementine.exe is vulnerable to a user mode write access violation due to a NULL pointer dereference i...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

SUSE CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

UBUNTU-CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

CVE-2024-50986 affects Clementine v1.3.1 and is exploitable via a local DLL hijacking/vector in Windows. A concrete PoC from a GitHub exploit shows that placing a crafted QUSEREX.DLL in C:\Users\AppData\Local\Microsoft\WindowsApps allows Clementine to load the malicious DLL at startup, enabling a...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

CVE-2024-50986

An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file...

Clementine 安全漏洞

Clementine is a multi-platform music player from the Clementine open source. A security vulnerability exists in Clementine v1.3.1, which originated from a vulnerability that allows local attackers to execute arbitrary code via a crafted DLL file...