201 matches found
ALEA-2020:4714 js-d3-flame-graph bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
js-d3-flame-graph bug fix and enhancement update
An update is available for js-d3-flame-graph. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...
js-d3-flame-graph bug fix and enhancement update
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
2020.1 IPU – Intel® SSD Advisory
Summary: A potential security vulnerability in Intel® Solid State Drive SSD products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVE ID: CVE-2020-0527 Description: Insufficient control flow management in...
CVE-2019-15430
The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/BlubooD2Pro/BlubooD2Pro:7.0/NRD90M/1510370501:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516508295515 that allows other pre-installed apps to...
Design/Logic Flaw
The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/BlubooD2Pro/BlubooD2Pro:7.0/NRD90M/1510370501:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516508295515 that allows other pre-installed apps to...
CVE-2019-15430
The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/BlubooD2Pro/BlubooD2Pro:7.0/NRD90M/1510370501:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516508295515 that allows other pre-installed apps to...
CVE-2019-15430
The CVE-2019-15430 entry concerns the Bluboo D3 Pro Android device. A pre-installed app (package: com.qiku.cleaner, versionCode=2, versionName=2.0.0_VER_32516508295515) exposes functionality that lets other pre-installed apps modify system properties through an accessible component. This can be e...
CVE-2019-15430: Undefined Security Weakness
The Bluboo D3 Pro Android device with a build fingerprint of BLUBOO/BlubooD2Pro/BlubooD2Pro:7.0/NRD90M/1510370501:user/release-keys contains a pre-installed app with a package name of com.qiku.cleaner app versionCode=2, versionName=2.0.0VER32516508295515 that allows other pre-installed apps to...
CVE-2016-10946
The wp-d3 plugin before 2.4.1 for WordPress has CSRF...
Cross site request forgery (csrf)
The wp-d3 plugin before 2.4.1 for WordPress has CSRF...
CVE-2016-10946
CVE-2016-10946 corresponds to a CSRF vulnerability in the wp-d3 WordPress plugin prior to version 2.4.1. The affected component is the wp-d3 plugin for WordPress; the root cause is a CSRF flaw in its handling of requests. Public descriptions across multiple connected sources consistently report t...
CVE-2016-10946
The wp-d3 plugin before 2.4.1 for WordPress has CSRF...
CVE-2016-10946: Cross-Site Request Forgery (CSRF)
The wp-d3 plugin before 2.4.1 for WordPress has CSRF...
Subdomain Enumeration Tool: Amass
Amass is the subdomain enumeration tool with the greatest number of disparate data sources that performs analysis of the resolved names in order to deliver the largest number of quality results. Amass performs scraping of data sources, recursive brute forcing, crawling of web archives, permuting...
GHSA-QMJG-G86H-6RC9 d3.js is malware
The d3.js package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern i...
Malicious JavaScript Package Detection
Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Malicious Typo-Squatting
D3.js was a malicious module as it is developed to hijack environment variables and send it to attacker’s controlled location...