CVE-2019-20440

An issue was discovered in WSO2 API Manager 2.6.0. A potential Reflected Cross-Site Scripting XSS vulnerability has been identified in the update API documentation feature of the API Publisher...

CVE-2021-2392

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2396

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: E-Business Suite - XDO. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2024-2658

A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 11.19.6.0 allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load a specially crafted...

The vulnerability of the Web Service API component of the Oracle BI Publisher software, which is used for creating reports, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Service API component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Sensitive Information Exposure

org.jenkins-ci.plugins, curseforge-publisher is vulnerable to sensitive information exposure. The vulnerability is due to improper masking of API keys on the job configuration form, which allows an attacker to observe and capture the exposed credentials...

Sensitive Information Disclosure

Jenkins Curseforge Publisher Plugin is vulnerable to Sensitive Information Disclosure. The vulnerability is due to storing API keys in plaintext in job configuration files, allowing users with Item/Extended Read permission or file system access on the Jenkins controller to view and misuse the...

Oracle Business Intelligence Publisher (OAS) (October 2025 CPU)

The 7.6.0.0.0, and 8.2.0.0.0 versions of Oracle Business Intelligence Publisher installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory. - Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: Web Service API...

Malicious code in palynology-cybernetics-schema-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb449bb955da5853cbd3c10edec33c18b47b924c86c52bd0f4d8d627cbc741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189558 Malicious code in soap-slidev-carpo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188294 Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185875 Malicious code in book-web-deploy-object-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e707ee8e6a7b157de7f049f46c37a2f9de5d01555279c9b19fe13e51bff46327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188432 Malicious code in oortcloud-lint-weywot-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d83fa54dbd7344ae559a67215d8e07f68ba8db150c8a908627d3c1b7557392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odasv-knu-bobacoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9c4acb1775afe696346b3bc51169ee2d1df25860c7c77413d0be0af9efb5a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184894 Malicious code in sonic-jos-afafiofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35195bf589359995435b89f1b92b5008dd9b9ba7f1b8cb6153c27771960bfb8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181663 Malicious code in astam-ift-dabtauzidami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af3924dda8e3251bce9b4714e3f11d7627f2bac65f2db4d0caac709c24e92a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183634 Malicious code in mahnu-nofy-gaoigaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57a8dbed1f47ddafff5118d5ab9f19e48e737ab7b563be1a5d28f83b2b12c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoiman-igiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1186b6e83ff0487da7e78327e20aedcc748328447d0c3175757efd4a15cf05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pilau-akaviu-kiona (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55bd653094d05a4090907ac350c8e30e21a046b40524eda3ca3c0fed76ab039f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c5a29e0161befe31c8736d1f88ec854ccbb5d3e1a052b1e1fc38a004132281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...