333 matches found
I released Vulristics 1.0.11: added Server-Side Request Forgery (SSRF) as a distinct vulnerability type
I releasedVulristics 1.0.11: added Server-Side Request Forgery SSRF as a distinct vulnerability type. I try to use a very small set of base vulnerability types around 20 in Vulristics and map everything else to them. With a few exceptions, these are the same types Microsoft uses - and Microsoft...
Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2019-19244)
Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usage. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, In...
Siemens SIMATIC S7-1500 NULL Pointer Dereference (CVE-2019-19923)
flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference or incorrect results. This plugin only works with Tenable.ot. Please visit...
EUVD-2025-105762
Malicious code in distinctgrasshopperz3n npm...
EUVD-2025-74732
Malicious code in distinctchickadeefuchsia-80 npm...
Malicious code in distinct_bison-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-101643 Malicious code in distinct_bison-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79397
Malicious code in distinctroundwormz3n npm...
EUVD-2025-82187
Malicious code in distinctmacawdumbs npm...
EUVD-2025-64489
Malicious code in distinctpenguinrequirement npm...
EUVD-2025-64487
Malicious code in distinctsolez3n npm...
Malicious code in distinct_penguin_requirement (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2db2d2e698ba915cbec6c3d414e84526958eef2290e2da2ba5967992aa46596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-86472
Malicious code in distinctdeerz3n npm...
Malicious code in distinct_baboon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77899d0f0b0f4664fc8c8d8b2206eed5f0c5f9e70dc09c18bf3b1133b3b9266b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in distinct-purple-ladybug (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5040f0633f5b60c6cddbdebf976bcc6c8ad99f12554b255398caf6625b5d0d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54858
Malicious code in distinct-moccasin-woodpecker npm...
EUVD-2025-54857
Malicious code in distinct-plum-hookworm npm...
EUVD-2025-54856
Malicious code in distinct-purple-ladybug npm...
MAL-2025-67792 Malicious code in distinct-plum-hookworm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8e3549fd4979bd9f4a23fee3554403982811b377bcb743d9ab47c8be88d8cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...