Lucene search
+L

1321 matches found

OSV
OSV
added 2024/11/27 12:16 a.m.13 views

MAL-2024-10991 Malicious code in node-prom-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54eae558cfa7e2e8291a99764e3a498e93667ac6abede39f44d5a0ebd1a4f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/27 12:16 a.m.7 views

Malicious code in node-prom-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54eae558cfa7e2e8291a99764e3a498e93667ac6abede39f44d5a0ebd1a4f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2024/11/06 4:12 a.m.12 views

MAL-2024-10431 Malicious code in ethgass-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e278f81839ea2e511d9b9d90880271f216f0694163070eb39cba33d0fd3e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/06 4:12 a.m.8 views

Malicious code in ethgass-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e278f81839ea2e511d9b9d90880271f216f0694163070eb39cba33d0fd3e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/11/05 6:15 a.m.8 views

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS5.8AI score0.04413EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/05 6:15 a.m.23 views

CVE-2024-9459

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.8CVSS0.04413EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/05 5:44 a.m.67 views

CVE-2024-9459

CVE-2024-9459 affects Zoho ManageEngine Exchange Reporter Plus up through version 5718 and earlier. The security issue is described as an authenticated SQL Injection in the reports module. The connected sources specifically list the affected software and version range, with remediation guidance r...

8.8CVSS8.6AI score0.04413EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/05 5:44 a.m.17 views

CVE-2024-9459 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.3CVSS8.2AI score0.04413EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/05 5:44 a.m.30 views

CVE-2024-9459 SQL Injection

Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior are vulnerable to authenticated SQL Injection in reports module...

8.3CVSS0.04413EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/05 12:00 a.m.14 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5718 and prior versions that stems from vulnerability to authenticated SQL injection in the reporting module...

8.8CVSS7.6AI score0.04413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/04 12:00 a.m.10 views

PT-2024-39647 · Zoho · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine Exchange Reporter Plus versions 5718 and prior Description: The issue concerns an authenticated SQL Injection in the reports module. Recommendations: For versions 5718 and prior, update to a version later than 5718 to...

8.8CVSS8.3AI score0.04413EPSS
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/10 6:35 a.m.8 views

Malicious code in typescript-error-reporter-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94ae0fc6c94bf4a0b84cd232b32cd4e5e36d035e62b1dea57e7c41d39d2c2406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2024/10/10 6:35 a.m.12 views

MAL-2024-9256 Malicious code in typescript-error-reporter-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94ae0fc6c94bf4a0b84cd232b32cd4e5e36d035e62b1dea57e7c41d39d2c2406 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:00 a.m.26 views

The vulnerability of the Veeam Reporter Service, a monitoring tool for IT infrastructure, allows a hacker to disclose protected information.

The vulnerability of the Veeam Reporter Service, a monitoring tool for IT infrastructure, is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

9CVSS7.9AI score0.00544EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2024/09/28 6:25 p.m.7 views

MAL-2024-9028 Malicious code in npm-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8509054ef8bb4904cd22330c51f6dd381a58717d3bc86b0130e40a667c1baa8 The OpenSSF Package Analysis project identified 'npm-reporter' @ 1000.0.1 npm as malicious. It is considered malicious because: - The package...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/09/25 12:31 p.m.9 views

MAL-2024-8986 Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/25 12:31 p.m.7 views

Malicious code in case-result-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/20 12:00 a.m.12 views

The vulnerability of the Reporter Widget component in the Veeam ONE monitoring software allows a attacker to execute arbitrary HTML code.

The vulnerability of the Reporter Widgets component of the Veeam ONE monitoring software lies in the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code remotely...

9CVSS7.6AI score0.00407EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/09/11 4:15 p.m.10 views

UBUNTU-CVE-2024-45019

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout reporter mlx5esafereopenchannels requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later...

7.8CVSS6.5AI score0.0018EPSS
SaveExploits0References12
Debian CVE
Debian CVE
added 2024/09/11 3:13 p.m.38 views

CVE-2024-45019

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Take state lock during tx timeout reporter mlx5esafereopenchannels requires the state lock taken. The referenced changed in the Fixes tag removed the lock to fix another issue. This patch adds it back but at a later...

7.8CVSS5.5AI score0.0018EPSS
SaveExploits0
Rows per page
Query Builder