Lucene search
+L

30299 matches found

OSV
OSV
added 2025/09/05 5:10 p.m.5 views

MAL-2025-44665 Malicious code in icicle-eagle-zga550-project (npm)

The package icicle-eagle-zga550-project was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.3 views

MAL-2025-46312 Malicious code in thistle-opal-jdf042-project (npm)

The package thistle-opal-jdf042-project was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 9:12 a.m.5 views

MAL-2025-42148 Malicious code in my-javascript-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52eefb119e001e8686a1bde4aad7885b353649df1b9e39a1e27537c7ca14a980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 9:12 a.m.6 views

Malicious code in my-javascript-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52eefb119e001e8686a1bde4aad7885b353649df1b9e39a1e27537c7ca14a980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
Snyk
Snyk
added 2025/09/04 11:42 p.m.6 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

9.9CVSS6.9AI score0.0534EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/04 11:42 p.m.3 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

9.9CVSS6.9AI score0.0534EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/04 11:42 p.m.4 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

9.9CVSS6.9AI score0.0534EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/04 11:42 p.m.5 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

9.9CVSS6.9AI score0.0534EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/04 11:42 p.m.4 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

9.9CVSS6.9AI score0.0534EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/09/04 11:42 p.m.2 views

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

9.9CVSS6.9AI score0.0534EPSS
SaveExploits1References2
NVD
NVD
added 2025/09/04 11:15 p.m.34 views

CVE-2025-55190

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwor...

9.9CVSS0.0534EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/09/04 10:37 p.m.37 views

CVE-2025-55190 Argo CD: Project API Token Exposes Repository Credentials

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwor...

9.9CVSS0.0534EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/09/04 10:37 p.m.3 views

CVE-2025-55190 Argo CD: Project API Token Exposes Repository Credentials

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwor...

9.9CVSS5.9AI score0.0534EPSS
SaveExploits1References2
OSV
OSV
added 2025/09/04 10:37 p.m.8 views

CVE-2025-55190 Argo CD: Project API Token Exposes Repository Credentials

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwor...

9.9CVSS6.7AI score
SaveExploits0References4
CVE
CVE
added 2025/09/04 10:37 p.m.572 views

CVE-2025-55190

Argo CD vulnerability CVE-2025-55190: In multiple releases of Argo CD, API tokens with project-level permissions can retrieve sensitive repository credentials via the project details API endpoint, even when tokens lack explicit access to secrets. The issue affects versions 2.13.0–2.13.8, 2.14.0–2...

9.9CVSS6.2AI score0.0534EPSS
SaveIn wildExploits1References2Affected Software1
OSV
OSV
added 2025/09/04 7:49 p.m.17 views

GHSA-786Q-9HCG-V9FF Argo CD's Project API Token Exposes Repository Credentials

Summary Argo CD API tokens with project-level permissions are able to retrieve sensitive repository credentials usernames, passwords through the project details API endpoint, even when the token only has standard application management permissions and no explicit access to secrets. Component:...

9.9CVSS6.7AI score0.0534EPSS
SaveExploits1References4
OSV
OSV
added 2025/09/04 6:34 p.m.12 views

CLSA-2025-1757010850 squid: Fix of CVE-2025-54574

CVE-2025-54574: fix heap buffer overflow in URN parsing...

9.8CVSS6AI score0.22918EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2025/09/04 10:11 a.m.14 views

PM / devfreq: Check governor before using governor->name

...

5.5CVSS7AI score0.00156EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2025/09/04 4:42 a.m.10 views

Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

...

7.5CVSS8.4AI score0.81039EPSS
SaveExploits2
CNNVD
CNNVD
added 2025/09/04 12:00 a.m.12 views

Argo CD 信息泄露漏洞

Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. An information disclosure vulnerability exists in Argo CD that stems from a project-level permission API token that can retrieve sensitive repository credentials. The following versions are affected: versio...

9.9CVSS6.3AI score0.0534EPSS
SaveExploits1References2
Rows per page
Query Builder