CVE-2025-34337: Insufficient Verification of Data Authenticity

eGovFramework/egovframe-common-components versions up to and including 4.3.1 includes Web Editor image upload and related file delivery functionality that uses symmetric encryption to protect URL parameters, but exposes an encryption oracle that allows attackers to generate valid ciphertext for...

CVE-2025-34336: Unrestricted Upload of File with Dangerous Type

eGovFramework/egovframe-common-components versions up to and including 4.3.1 contain an unauthenticated file upload vulnerability via the /utl/wed/insertImage.do and /utl/wed/insertImageCk.do image upload endpoints. These controllers accept multipart requests without authentication, pass the...

egovframe-common-components 安全漏洞

egovframe-common-components is a collection of commonly used functions open-sourced by the e-Government Standard Framework Center. A security vulnerability exists in egovframe-common-components version 4.3.1 and earlier, which stems from a design flaw in symmetric encryption that could lead to an...

EUVD-2016-0618

Malware in sbrugna...

EUVD-2016-0582

Malware in sbrugna...

EUVD-2016-0546

Malware in sbrugna...

EUVD-2016-0548

Malware in sbrugna...

EUVD-2016-0549

Malware in sbrugna...

Malicious code in @flight-common/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...

MAL-2025-42122 Malicious code in @flight-common/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...

MAL-2025-647 Malicious code in cond-common-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20fdf3ae556b0eb0c40c1a9d9ff8cd96271c2b86b35462531e5b46fc2151dd7b Any computer that has this package installed or running should be considered...

Malicious code in cond-common-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20fdf3ae556b0eb0c40c1a9d9ff8cd96271c2b86b35462531e5b46fc2151dd7b Any computer that has this package installed or running should be considered...

MAL-2024-11027 Malicious code in ads-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293ac90d50dec59b81bca66b9d0a5d8c0cda050590e84031f86b85671cdcc494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ads-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293ac90d50dec59b81bca66b9d0a5d8c0cda050590e84031f86b85671cdcc494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Common Components component of the Oracle Financials financial management platform, which allows a malicious actor to gain unauthorized access to create, modify, and delete data.

The vulnerability of the Common Components component of the Oracle Financials financial management platform, part of the Oracle E-Business Suite, is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

CVE-2024-21282

Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful...

CVE-2024-21282: Incorrect Authorization

Vulnerability in the Oracle Financials product of Oracle E-Business Suite component: Common Components. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successful...

Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

Malicious code in paytm-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a3cc5106fdbcfdb7b5fcf3fc077142981c268b775e90e73b33fb15d200bb80 The OpenSSF Package Analysis project identified 'paytm-common-components' @ 9.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-32 Malicious code in paytm-common-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17a3cc5106fdbcfdb7b5fcf3fc077142981c268b775e90e73b33fb15d200bb80 The OpenSSF Package Analysis project identified 'paytm-common-components' @ 9.0.1 npm as malicious. It is considered malicious because: - The...