Lucene search
K

30 matches found

Snyk
Snyk
added 2025/11/14 8:43 a.m.1 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the MSTeams plugin OAuth flow. An attacker can modify arbitrary posts by sending a crafted OAuth redirect URL. Remediation Upgrade...

5.4CVSS6.5AI score0.00045EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/29 10:51 p.m.1 views

Malicious Package

Overview airbnb-opentracing-javascript is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
Exploits0References2
OSV
OSV
added 2025/10/29 10:51 p.m.1 views

MAL-2025-48980 Malicious code in airbnb-opentracing-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6e111a14bd58c590e23784b48c4857ce72456a2fd0e20175152e13d93b0863 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:51 p.m.2 views

Malicious code in airbnb-opentracing-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb6e111a14bd58c590e23784b48c4857ce72456a2fd0e20175152e13d93b0863 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References2
EUVD
EUVD
added 2025/10/29 10:51 p.m.1 views

EUVD-2025-36780

Malicious code in airbnb-opentracing-javascript npm...

6.6AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-5055

Malicious code in bioql PyPI...

7.1CVSS5.9AI score0.00339EPSS
Exploits0References15
Snyk
Snyk
added 2025/04/22 4:56 p.m.1 views

Exposure of Sensitive Information Through Metadata

Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata when executing the UpdateChannelBookmark function, due to improper handling of user permissions. By creating a bookmark referencing a deleted file, an attacker can expose metadata from...

4.3CVSS4.2AI score0.00095EPSS
Exploits0References3
OSV
OSV
added 2024/03/06 11:9 a.m.27 views

BIT-WILDFLY-2020-27822

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...

7.1CVSS6.1AI score0.00339EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/07/31 12:0 a.m.6 views

Fedora: Security Advisory for golang-github-uber-jaeger-client (FEDORA-2022-37aef44d1e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2022/07/30 2:0 a.m.10 views

[SECURITY] Fedora 36 Update: golang-github-uber-jaeger-client-2.30.0-3.fc36

Instrumentation library that implements an OpenTracing Tracer for Jaeger https://jaegertracing.io...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.14 views

Fedora: Security Advisory for golang-github-uber-jaeger-client (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.00963EPSS
Exploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.14 views

[SECURITY] Fedora 36 Update: golang-github-uber-jaeger-client-2.30.0-2.fc36

Instrumentation library that implements an OpenTracing Tracer for Jaeger https://jaegertracing.io...

9.3CVSS8.2AI score0.00963EPSS
Exploits4
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 7:27 a.m.3 views

Malicious code in dd-opentracing-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094869f1cac10d1231339fa194b3ff020ef412c2353e2f171bcd02a49ac2374f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/06/20 7:27 a.m.4 views

MAL-2022-2374 Malicious code in dd-opentracing-cpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 094869f1cac10d1231339fa194b3ff020ef412c2353e2f171bcd02a49ac2374f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2022/05/24 5:35 p.m.25 views

GHSA-QX3P-9MMP-4V8H Wildfly has a memory leak vulnerability

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...

5.9CVSS6.1AI score0.00339EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2022/05/24 5:35 p.m.44 views

Wildfly has a memory leak vulnerability

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...

7.1CVSS6.7AI score0.00339EPSS
Exploits0References8Affected Software1
RedHat Linux
RedHat Linux
added 2021/02/08 9:6 a.m.2 views

wildfly: Potential Memory leak in Wildfly when using OpenTracing

A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...

7.1CVSS5.8AI score0.00339EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/01/25 4:34 p.m.1 views

wildfly: Potential Memory leak in Wildfly when using OpenTracing

A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...

7.1CVSS5.8AI score0.00339EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/01/25 4:32 p.m.1 views

wildfly: Potential Memory leak in Wildfly when using OpenTracing

A flaw was found in Wildfly. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability...

7.1CVSS5.8AI score0.00339EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/01/25 4:32 p.m.76 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.5 security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

7.8CVSS6.7AI score0.00505EPSS
Exploits2References28
Rows per page
Query Builder