1877 matches found
MAL-2025-47701 Malicious code in nuget.castle-core (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2025-10220
Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...
CVE-2025-10220
CVE-2025-10220 affects AxxonSoft Axxon One VMS 2.0.0–2.0.4 on Windows due to use of unmaintained third‑party NuGet components (e.g., Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe). The underlying issue is reliance on unmaintained third‑party packages, enabling remote code e...
CVE-2025-10220 Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4
Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...
CVE-2025-10220 Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4
Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...
PT-2025-37038
Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One VMS versions 2.0.0 through 2.0.4 Description: The software uses unmaintained third-party components in its NuGet dependencies. This allows a remote attacker to execute arbitrary code or bypass security features by exploiti...
Linux Distros Unpatched Vulnerability : CVE-2022-3478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions...
Linux Distros Unpatched Vulnerability : CVE-2021-22168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8. CVE-2021-22168 Note...
MAL-2025-17357 Malicious code in com.unity.nuget.mono-cecil (npm)
The package com.unity.nuget.mono-cecil was found to contain malicious code...
Malicious code in com.unity.nuget.mono-cecil (npm)
The package com.unity.nuget.mono-cecil was found to contain malicious code...
Malicious code in com.unity.nuget.newtonsoft-json (npm)
The package com.unity.nuget.newtonsoft-json was found to contain malicious code...
MAL-2025-17358 Malicious code in com.unity.nuget.newtonsoft-json (npm)
The package com.unity.nuget.newtonsoft-json was found to contain malicious code...
NuGet Package 'ModelContextProtocol' Detection
The remote host has a 'ModelContextProtocol' with a Verified NuGet package status and is installed on the remote host. Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Malicious code in nuget-trends (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15d8438aa8bc3250a81a056153ed3922c2857a17e24e289a90822ae2362acfa Any computer that has this package installed or running should be considered...
MAL-2025-4573 Malicious code in nuget-trends (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e15d8438aa8bc3250a81a056153ed3922c2857a17e24e289a90822ae2362acfa Any computer that has this package installed or running should be considered...
CVE-2024-54138
NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight...
CVE-2023-34225
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible...
CVE-2022-3478
An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.4.6, all versions starting from 15.5 before 15.5.5, all versions starting from 15.6 before 15.6.1. It was possible to trigger a DoS attack by uploading a malicious nuget package...