384 matches found
CVE-2025-1948 vulnerabilities
Vulnerabilities for packages: neo4j...
GHSA-889J-63JV-QHR8 vulnerabilities
Vulnerabilities for packages: neo4j...
CVE-2025-1948 vulnerabilities
Vulnerabilities for packages: neo4j...
GHSA-889J-63JV-QHR8 vulnerabilities
Vulnerabilities for packages: neo4j...
MAL-2025-3195 Malicious code in neo4j-apoc-procedures (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in neo4j-apoc-procedures (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ae32122ca71a7a075fce5993dbcdceca009308664157c1655b4b3897e205f3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in neo4j-apoc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446dfffd9d2f4e171ae7e9e3d88c997b8c9c9437d3f9c6b47174ad17ac40a651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3194 Malicious code in neo4j-apoc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446dfffd9d2f4e171ae7e9e3d88c997b8c9c9437d3f9c6b47174ad17ac40a651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
BIT-NEO4J-2024-34517
The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access...
GHSA-QH8G-58PP-2WXH vulnerabilities
Vulnerabilities for packages: spark, pinot, spark-fips, trino, clojure-tools, apache-pulsar, hadoop-client-modules, confluent-kafka-jre-bcfips, zookeeper, apache-pulsar-fips, cassandra-reaper, strimzi-kafka-operator-fips, spark-kubernetes-operator-fips, spark-kubernetes-operator, wso2is,...
GHSA-G8M5-722R-8WHQ vulnerabilities
Vulnerabilities for packages: zookeeper, celeborn, confluent-kafka, druid, solr, spark, zookeeper-fips, cassandra-reaper, strimzi-kafka-operator, spark-fips, apache-tika, confluent-kafka-jre-bcfips, apache-nifi, kafka, cloudwatch-exporter...
CVE-2024-8184 vulnerabilities
Vulnerabilities for packages: zookeeper, celeborn, confluent-kafka, druid, solr, spark, zookeeper-fips, cassandra-reaper, strimzi-kafka-operator, spark-fips, apache-tika, confluent-kafka-jre-bcfips, apache-nifi, kafka, cloudwatch-exporter...
CVE-2024-6763 vulnerabilities
Vulnerabilities for packages: spark, pinot, spark-fips, trino, clojure-tools, apache-pulsar, hadoop-client-modules, confluent-kafka-jre-bcfips, zookeeper, apache-pulsar-fips, cassandra-reaper, strimzi-kafka-operator-fips, spark-kubernetes-operator-fips, spark-kubernetes-operator, wso2is,...
Exploit for SQL Injection in Langchain
Proof of Concept for Langchain CVE-2024–8309 Vulnerability...
CVE-2024-7254 vulnerabilities
Vulnerabilities for packages: debezium-connector-spanner, ruby3.3-fluentd-kubernetes-daemonset, hadoop-fips, kube-fluentd-operator, trino, hadoop-client-modules, confluent-kafka-jre-bcfips, kafka, elasticsearch, thingsboard, opensearch, ruby3.4-fluentd-kubernetes-daemonset, confluent-kafka, druid...
JAW - A Graph-based Security Analysis Framework For Client-side JavaScript
An open-source, prototype implementation of property graphs for JavaScript based on the esprima parser, and the EsTree SpiderMonkey Spec. JAW can be used for analyzing the client-side of web applications and JavaScript-based programs. This project is licensed under GNU AFFERO GENERAL PUBLIC LICEN...
This Week in Spring - May 14th, 2024
Hi, Spring fans! Welcome to another installment of This Week in Spring! This week's highlights in the Spring ecosystem emphasize the ongoing advancements and applications of Spring AI. The discussions range from exploring the impressive VectorStore abstraction and enhanced structured output suppo...
Neo4j Detection
Binary data neo4jdetect.nbin...
Neo4j < 5.19.0 Privilege Mishandling (CVE-2024-34517)
According to its its self-reported version number, the version of Neo4j running on the remote host is a version prior to 5.19.0. It is, therefore, affected by a privilege mishandling vulnerability in the Cypher component which mishandles IMMUTABLE privileges. Note that Nessus has not tested for...