Lucene search
+L

20346 matches found

OSV
OSV
•added 2024/10/10 4:23 a.m.•8 views

MAL-2024-9235 Malicious code in helri-shiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4d519e88d591f17cacd1c40eb414b21e026b9ea5d54240b23399cf203aeb084 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2024/10/10 3:11 a.m.•8 views

SUSE CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

6.1CVSS7.6AI score0.01038EPSS
SaveExploits0References4
Veracode
Veracode
•added 2024/10/10 3:11 a.m.•22 views

XML External Entity (XXE)

phpoffice/phpspreadsheet is vulnerable to XML External Entity XXE. The vulnerability is due to a flawed XML encoding check in the toUtf8 function of the security scanner, allows crafted XML structures with whitespace to bypass the security measures intended to prevent XXE attacks...

7.5CVSS7.5AI score0.02776EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2024/10/09 2:07 p.m.•10 views

MAL-2024-9184 Malicious code in shmam-test-npm-test-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b028136f8820f808eb720a45a7f396272c884a63944c004999ce50781449b6d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 12:30 p.m.•13 views

GHSA-JQFV-JRVQ-95JM Apache XML Graphics FOP XML External Entity Reference ('XXE') vulnerability

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

6.9CVSS6.7AI score0.01038EPSS
SaveExploits0References6
OSV
OSV
•added 2024/10/09 12:15 p.m.•8 views

DEBIAN-CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

7.5CVSS6.2AI score0.01038EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/09 12:15 p.m.•9 views

UBUNTU-CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

7.5CVSS6.7AI score0.01038EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2024/10/09 12:04 p.m.•44 views

CVE-2024-28168 Apache XML Graphics FOP: XML External Entity (XXE) Processing

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

0.01038EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/10/09 12:04 p.m.•24 views

CVE-2024-28168

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue...

7.5CVSS6.2AI score0.01038EPSS
SaveExploits0
OSV
OSV
•added 2024/10/09 7:15 a.m.•12 views

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/09 7:15 a.m.•22 views

CVE-2024-39586

Dell AppSync Server, version 4.3 through 4.6, contains an XML External Entity Injection vulnerability. An adjacent high privileged attacker could potentially exploit this vulnerability, leading to information disclosure...

4.3CVSS0.00217EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•12 views

MAL-2024-9130 Malicious code in bcsgb0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfcb4c38c6f16fbc50c3efb3401f855ea4cad84cdaf68c9badd88e80a581e84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/09 7:04 a.m.•9 views

Malicious code in d40tmf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4866ac2f2461e74cfa4509e5237bcbfbaae69a548dde50b492463051daa8baed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•9 views

MAL-2024-9124 Malicious code in agquu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36919c509db732cc8b07bcc95c88a4b21998332aa2abc81d5a35a9340345b3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•11 views

MAL-2024-9188 Malicious code in svuv9u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d10f8dd67eadf279ea287de2957730d8a0e580934d01a44a23d868ab3534fdb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•10 views

MAL-2024-9195 Malicious code in updated-script-rainbow-six-siege-renown-method-unlimited-undetected-updated-2023-aaseax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e38a8e46fd7a50a4aa74b0c1f46075a329295be810eb70a479185500004b03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•8 views

MAL-2024-9208 Malicious code in xkpnm0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa41e4a8231fcd0afc64bf75584739b7b8e64b504e37d6242b19b9685d29c2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•10 views

MAL-2024-9200 Malicious code in updated-today-gen-muck-c-h-e-a-t-injector-f-r-e-e-god-m-ode-speed-h-a-c-k-2023-undetected-oi37fp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26688f0b878a64cb8685eb7de542d452b53b0fed1f1ac1f1da158e128bb006c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2024/10/09 7:04 a.m.•10 views

MAL-2024-9138 Malicious code in code-script-new-roblox-muscle-legends-script-tr9plv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 780f0af2802d39365386734610e4539ac7340ae349dd24768d304da50c560f7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/10/09 7:04 a.m.•6 views

Malicious code in new-script-clipox-gt-a-v-h-a-c-k-mon-ey-tp-guns-esp-vehicles-more-1-52-undetected-2023-6yc1p7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654f49589ce2c8c7994c0b01b6297081f21b24a5d5caa9991ef8be0e21ea3165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder