Lucene search
+L

669 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/02/05 11:19 p.m.5 views

Malicious code in @buffer-mono/png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9244d2dab3f1dfded05311dc18e1475aa475a5526b78409227c8b03dae2d3091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/02/05 11:19 p.m.9 views

MAL-2023-31 Malicious code in @buffer-mono/png-export (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9244d2dab3f1dfded05311dc18e1475aa475a5526b78409227c8b03dae2d3091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement -...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.7 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.iossimulator-x86.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement -...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.5 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.maccatalyst-x64.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement -...

8.8CVSS7.5AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.8 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.tvos-arm64.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotne...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.8 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.win-x64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

8.8CVSS7.5AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.8 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.tvos-arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm64.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotn...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.7 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-arm.Msi.x64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.5AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.7 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.android-x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Issue -...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.10 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.arm64 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet...

8.8CVSS7.6AI score0.01608EPSS
SaveExploits0References2
Snyk
Snyk
added 2022/10/18 9:46 p.m.6 views

Remote Code Execution (RCE)

Overview Affected versions of this package are vulnerable to Remote Code Execution RCE where a stack buffer overrun occurs in .NET Double Parse routine. Remediation Upgrade Microsoft.NETCore.App.Runtime.Mono.ios-arm.Msi.x86 to version 6.0.3 or higher. References - Dotnet Announcement - Dotnet Iss...

8.8CVSS7.5AI score0.01608EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.14 views

Ubuntu: Security Advisory (USN-357-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.2CVSS6.6AI score0.00449EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.17 views

Ubuntu: Security Advisory (USN-397-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.6AI score0.05115EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.10 views

The vulnerability of the Mono_Loader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the MonoLoader.dll library, which is used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to a numerical overflow issue during syntax analysis of TG4 files. Exploiting this vulnerability can allow attacke...

3.3CVSS5.9AI score0.00523EPSS
SaveExploits0References4Affected Software2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:23 p.m.3 views

Malicious code in elastic-charts-mono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb78ffc9724ee90a3d839ed4c8f548ab02d9e995af0b057843c43b456463346 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:23 p.m.11 views

MAL-2022-2684 Malicious code in elastic-charts-mono (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb78ffc9724ee90a3d839ed4c8f548ab02d9e995af0b057843c43b456463346 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 7:27 a.m.5 views

Malicious code in web-sdk-mono-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 979fb0281764bb321aa89f52ee521761dda7d8a4a2c9224ea1f6b55a77d3a066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 7:27 a.m.12 views

MAL-2022-7076 Malicious code in web-sdk-mono-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 979fb0281764bb321aa89f52ee521761dda7d8a4a2c9224ea1f6b55a77d3a066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder