Lucene search
+L

12967 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 4:09 p.m.6 views

Malicious code in spinal-core-connectorjs_type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3451f756dd259cb0c2c30ea5f39c2d4a80eef529d40a35beafd582ce7d01420 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/12/01 3:42 p.m.5 views

MAL-2024-11172 Malicious code in spinal-core-connectorjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55ec90344a6042cf94a3e9a576e833a0277da7732a8322612604d186cab49b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 3:42 p.m.5 views

Malicious code in spinal-core-connectorjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55ec90344a6042cf94a3e9a576e833a0277da7732a8322612604d186cab49b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/12/01 2:54 p.m.8 views

MAL-2024-11170 Malicious code in qt-construct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e83ab35f49c26dc7986fc0d8853ff836b168fef5f28c1fd662cf8afb400fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/12/01 9:23 a.m.7 views

MAL-2024-11167 Malicious code in fluid-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5d371b6c8c7950311649323e234550b5c9c644c9a9e2aada8180962d6dab886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 7:51 a.m.3 views

Malicious code in eslint-config-sunset-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042f734df520ee49c1cf44e40629e136159746964c87533d226f02be765e956e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/01 7:01 a.m.5 views

Malicious code in demo-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73030295cfc2df37061e6ab74ae2c0b2cea34184879e24b484012a578a9ed576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 12:40 p.m.10 views

MAL-2024-11158 Malicious code in o-tabssssssle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48f8ca040e7ad3dd3b10535c7ffe6d9ff2f150d544aff2bcb65867468408dbb5 The OpenSSF Package Analysis project identified 'o-tabssssssle' @ 10.11.12 npm as malicious. It is considered malicious because: - The package...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 12:40 p.m.2 views

Malicious code in o-tabssssssle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48f8ca040e7ad3dd3b10535c7ffe6d9ff2f150d544aff2bcb65867468408dbb5 The OpenSSF Package Analysis project identified 'o-tabssssssle' @ 10.11.12 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 4:36 a.m.2 views

Malicious code in flpweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1990c310aa0a3cd0c27f4306fe0f81385afb6c137acc4f6b1c42ea5ceb3a4845 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/11/29 5:15 p.m.8 views

CVE-2024-49806

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS7.5AI score0.0032EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/29 5:15 p.m.20 views

CVE-2024-49805

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS0.00333EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/29 5:15 p.m.27 views

CVE-2024-49806

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.8CVSS0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/29 4:53 p.m.29 views

CVE-2024-49806 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS6.9AI score0.0032EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/29 4:52 p.m.19 views

CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS6.9AI score0.00333EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/29 4:52 p.m.30 views

CVE-2024-49805 IBM Security Verify Access Appliance hard coded credentials

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...

9.4CVSS0.00333EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/29 6:09 a.m.5 views

Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/11/29 6:09 a.m.6 views

MAL-2024-11131 Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/29 12:00 a.m.12 views

PT-2024-33691 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8 Description: The issue concerns hard-coded credentials, such as a password or cryptographic key, used by the appliance for its own inbound authentication, outbound...

9.8CVSS7AI score0.0032EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2024/11/29 12:00 a.m.10 views

Axis Communications Network Cameras and Video Servers Arbitrary OS Commands Execution (CVE-2004-2425)

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent and possibly other shell metacharacters in the query string to virtualinput.cgi. This plugin only works with Tenable.ot. Please visit...

7.5CVSS6.1AI score0.1353EPSS
SaveExploits2References15
Rows per page
Query Builder