Lucene search
+L

83 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/17 4:45 a.m.4 views

Malicious code in bi-client-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4958232b726a1860e2249777a33af7cb9441504fb1a639578f964f844068a8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/08/17 4:45 a.m.5 views

MAL-2022-1560 Malicious code in bi-client-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4958232b726a1860e2249777a33af7cb9441504fb1a639578f964f844068a8c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:21 p.m.8 views

MAL-2022-300 Malicious code in @grubhubprod/order-taking-client-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4c6e56a04f848f7b73d05f70cacf34eeaa6fbe9b1e7df5354464782bf7224e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 7:27 a.m.4 views

Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 7:27 a.m.6 views

MAL-2022-1926 Malicious code in client-sdk-contract-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe4a02bd1d1d6b8dc69d43a33f5f9e0da5592d4cc02571a1e6e51fa53cda52b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/03 4:41 p.m.27 views

Security Bulletin: TLS padding vulnerability affects Informix Dynamic Server ( CVE-2014-8730)

Summary IBM Informix Dynamic Server can be affected by a TLS Transport Layer Security padding vulnerability which can allow a remote attacker to obtain sensitive information. Vulnerability Details The following vulnerability affects IBM Informix Dynamic Server. CVEID: CVE-2014-8730 DESCRIPTION: I...

4.3CVSS4.3AI score0.1372EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/12/07 3:25 p.m.81 views

Security Bulletin: IBM Informix Client SDK is affected by GSKIT vulnerabilities

Summary IBM Informix Client SDK has addressed the issues reported for the following GSKIT vulnerabilities. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA private keys. An attacker could exploit...

10CVSS0.9AI score0.26335EPSS
SaveExploits1Affected Software1
OSV
OSV
added 2018/10/10 1:29 p.m.8 views

CVE-2018-8531

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory, aka "Azure IoT Device Client SDK Memory Corruption Vulnerability." This affects Hub Device Client SDK, Azure IoT Edge...

8.8CVSS6.3AI score0.15191EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/10/10 12:0 a.m.5 views

Microsoft Azure IoT Device Client SDK Remote Memory Corruption Vulnerability

Microsoft C SDK for Azure IoT is a C-based software development kit for developing Azure IoT Internet of Things platform applications from Microsoft. A remote memory corruption vulnerability exists in the Microsoft Azure IoT Device Client SDK. An attacker can exploit this vulnerability to execute...

9.3CVSS8.8AI score0.15191EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2018/10/09 7:0 a.m.37 views

Azure IoT Device Client SDK Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Azure IoT Hub Device Client SDK using MQTT protocol accesses objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who...

9.3CVSS3.3AI score0.15191EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2018/10/09 12:0 a.m.545 views

KLA11330 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Azure IoT Device Client SDK can be...

9.3CVSS8.7AI score0.15191EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 2:12 p.m.123 views

Security Bulletin: IBM Informix Client SDK CPU utilization (CVE-2014-0963)

Summary Informix Client SDK is affected by a problem related to the SSL implementation which, under very specific conditions, can cause CPU utilization to rapidly increase. Vulnerability Details CVE ID: CVE-2014-0963 DESCRIPTION: Informix Client SDK is affected by a problem with the handling of...

7.1CVSS6.5AI score0.03077EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 2:11 p.m.26 views

Security Bulletin: Potential SSL/TLS-related denial of service vulnerability in IBM Informix Client SDK (CVE-2013-6329)

Summary Informix Client SDK is impacted by a vulnerability in IBM's GSKIT library which can result in a denial of service caused by an error in SSL/TLS handshake processing related to session resumption when using SSLv2. A remote attacker could exploit this vulnerability to cause the system to...

7.8CVSS7.7AI score0.03159EPSS
SaveExploits1Affected Software1
myhack58
myhack58
added 2015/10/24 12:0 a.m.17 views

The rice client SDK is aeration can hijack all of the user's SMS-vulnerability warning-the black bar safety net

Mobile App developers are faced with how to be profitable with this inevitable problem, which is the most common method is the application of added advertising. Advertising Alliance to create a function library that facilitate developers the ads which, to start quickly to make money. We previousl...

7.1AI score
SaveExploits0
Check Point Advisories
Check Point Advisories
added 2010/02/02 12:0 a.m.3 views

IBM Informix Client SDK NFX File Processing Stack Buffer Overflow

Informix is a family of relational database management system RDBMS products by IBM. It is positioned as IBM's flagship data server for online transaction processing OLTP as well as integrated solutions. IBM Informix Client Software Development Kit SDK is a package of several APIs that are used i...

8AI score
SaveExploits0
NVD
NVD
added 2009/10/13 10:30 a.m.21 views

CVE-2009-3691

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...

9.3CVSS7.9AI score0.0704EPSS
SaveExploits2References7
Prion
Prion
added 2009/10/13 10:30 a.m.13 views

Integer overflow

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...

9.3CVSS8.5AI score0.0704EPSS
SaveExploits2References7Affected Software2
CVE
CVE
added 2009/10/13 10:0 a.m.57 views

CVE-2009-3691

CVE-2009-3691 affects IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x. A crafted .nfx file with manipulated HostSize (and possibly ProtoSize/ServerSize) triggers a stack-based buffer overflow in HostList, enabling remote code execution or crashes. Connected advisories confir...

9.3CVSS7.9AI score0.0704EPSS
SaveExploits2References7Affected Software2
Cvelist
Cvelist
added 2009/10/13 10:0 a.m.31 views

CVE-2009-3691

Multiple integer overflows in setnet32.exe 3.50.0.13752 in IBM Informix Client SDK 3.0 and 3.50 and Informix Connect Runtime 3.x allow remote attackers to execute arbitrary code via a .nfx file with a crafted 1 HostSize, and possibly 2 ProtoSize and 3 ServerSize, field that triggers a stack-based...

7.9AI score0.0704EPSS
SaveExploits2References7
exploitpack
exploitpack
added 2009/10/05 12:0 a.m.13 views

IBM Informix Client SDK 3.0 - .nfx File Integer Overflow

IBM Informix Client SDK 3.0 - .nfx File Integer Overflow ?php / IBM Informix Client SDK 3.0 SetNet32 File .nfx Hostsize integer overflow exploit 2k3 sp0 by Nine:Situations:Group::bruiser site: http://retrogod.altervista.org/ vulnerable packages: IBM Informix Client SDK 3.0, IBM Informix Connect...

0.5AI score
SaveExploits0
Rows per page
Query Builder