Lucene search
+L

67 matches found

OSV
OSV
added 2024/08/07 11:58 p.m.9 views

MAL-2024-7986 Malicious code in syf-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaf53164384bcbeeceafc8ee843317d9daac2a3f5fe99a0692b9f572f3fead3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 12:22 p.m.3 views

MAL-2024-2010 Malicious code in @the-platform-group/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:22 p.m.3 views

Malicious code in @the-platform-group/component-library (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/20 8:1 p.m.2 views

Malicious code in melichat-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7d152708054848a62109924487b7dcacac50e054b19a8682b3b0b26b279e6b The OpenSSF Package Analysis project identified 'melichat-component-library' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/09/12 8:18 a.m.4 views

Malicious code in xweb_3.0_component_lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f6b7e56dbb18ea6a0d7b22a4334b7303140d6c041322360074890df204e941a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/03/29 8:15 p.m.3 views

UBUNTU-CVE-2022-44368

NASM v2.16 was discovered to contain a null pointer deference in the NASM component...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References3
OSV
OSV
added 2023/02/01 8:15 p.m.7 views

CVE-2023-23074

Cross site scripting XSS vulnerability in Zoho ManageEngine ServiceDesk Plus 14 via embedding videos in the language component...

6.1CVSS6.2AI score0.83581EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/12/31 12:30 p.m.34 views

Ariadne Component Library vulnerable to Server-Side Request Forgery

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 can address this issue. It is recommended to upgrade t...

9.8CVSS9.1AI score0.00662EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/12/31 12:30 p.m.58 views

GHSA-QR97-V87P-X965 Ariadne Component Library vulnerable to Server-Side Request Forgery

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 can address this issue. It is recommended to upgrade t...

9.8CVSS9.5AI score0.00662EPSS
SaveExploits0References6
NVD
NVD
added 2022/12/31 10:15 a.m.20 views

CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

9.8CVSS0.00662EPSS
SaveExploits0References4
OSV
OSV
added 2022/12/31 10:15 a.m.20 views

CVE-2017-20157

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

9.8CVSS9.6AI score
SaveExploits0References4
Prion
Prion
added 2022/12/31 10:15 a.m.14 views

Server side request forgery (ssrf)

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

7.5CVSS9.4AI score0.00662EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/12/31 9:10 a.m.28 views

CVE-2017-20157 Ariadne Component Library Url.php server-side request forgery

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

5.5CVSS9.6AI score0.00662EPSS
SaveExploits0References4
CVE
CVE
added 2022/12/31 9:10 a.m.78 views

CVE-2017-20157

Ariadne Component Library (versions up to 2.x) contains a server-side request forgery (SSRF) in an unknown function of src/url/Url.php. The vulnerability is classified as critical and is triggered by manipulated input; impact is documented as SSRF with potential access to internal resources. A fi...

9.8CVSS7.4AI score0.00662EPSS
SaveExploits0References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/12/31 12:0 a.m.41 views

Server-Side Request Forgery (SSRF)

A vulnerability was found in Ariadne Component Library up to 2.x. It has been classified as critical. Affected is an unknown function of the file src/url/Url.php. The manipulation leads to server-side request forgery. Upgrading to version 3.0 is able to address this issue. It is recommended to...

9.8CVSS4.8AI score0.00662EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2022/12/31 12:0 a.m.3 views

Ariadne Component Library 代码问题漏洞

Ariadne Component Library is a set of url, http and xss components for Ariadne CMS open source. A code issue vulnerability exists in Ariadne Component Library version 2.x and prior versions. An attacker could exploit this vulnerability to perform server-side request forgery attacks...

9.8CVSS6.6AI score0.00662EPSS
SaveExploits0References5
OSV
OSV
added 2022/12/13 7:15 p.m.2 views

CVE-2022-44679

Windows Graphics Component Information Disclosure Vulnerability...

6.5CVSS5.8AI score0.00529EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/12/12 8:35 a.m.3 views

Malicious code in ng-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef416fdc9c0de5c01568db5736d97e155db0d9f87676459ecaad2b0c0b009e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/12/12 8:35 a.m.9 views

MAL-2022-4843 Malicious code in ng-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ef416fdc9c0de5c01568db5736d97e155db0d9f87676459ecaad2b0c0b009e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/12/07 12:27 a.m.17 views

MAL-2022-224 Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder