Lucene search
+L

4515 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/01/11 3:51 a.m.•9 views

Malicious code in sa-docs-to-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70b9f8969d70ff8ef6b6fb6844384b3c90472a21d74988fad9a9d07349cf4c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/11 3:51 a.m.•13 views

MAL-2023-753 Malicious code in sa-docs-to-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70b9f8969d70ff8ef6b6fb6844384b3c90472a21d74988fad9a9d07349cf4c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2023/01/11 12:00 a.m.•33 views

EulerOS Virtualization 2.9.1 : cups (EulerOS-SA-2023-1185)

According to the versions of the cups package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-0...

3.3CVSS5.9AI score0.02031EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/01/11 12:00 a.m.•30 views

EulerOS Virtualization 2.9.0 : deltarpm (EulerOS-SA-2023-1217)

According to the versions of the deltarpm package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service application crash via an invalid file that causes ...

9.8CVSS8AI score0.51733EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
•added 2023/01/10 12:00 a.m.•33 views

EulerOS Virtualization 2.9.1 : net-snmp (EulerOS-SA-2023-1198)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in net-snmp. A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds...

8.8CVSS6.8AI score0.01299EPSS
SaveExploits0References7
NVD
NVD
•added 2023/01/09 3:15 a.m.•22 views

CVE-2023-0035

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

7.8CVSS6.8AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/09 3:15 a.m.•26 views

CVE-2023-0036

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

7.8CVSS6.8AI score0.00183EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/09 3:15 a.m.•21 views

Authentication flaw

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

4.3CVSS7.7AI score0.00183EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2023/01/09 3:15 a.m.•23 views

Authentication flaw

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

4.3CVSS7.7AI score0.00183EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/09 2:24 a.m.•23 views

CVE-2023-0036 platform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

6.5CVSS7.2AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/09 2:24 a.m.•78 views

CVE-2023-0036

CVE-2023-0036 affects OpenHarmony v3.0.5 and earlier. The vulnerability is in the platform_callback_stub of the misc subsystem, causing an authentication bypass that enables a local attacker to bypass authentication and target other SAs with high privileges. No exploitation details are provided i...

7.8CVSS7.1AI score0.00183EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2023/01/09 2:24 a.m.•2 views

CVE-2023-0036

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

8.2CVSS0.00183EPSS
SaveExploits0References1
Mend
Mend
•added 2023/01/09 2:23 a.m.•3 views

CVE-2023-0035

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

8.2CVSS0.00183EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/09 2:23 a.m.•79 views

CVE-2023-0035

OpenHarmony you’re looking at: affected product OpenHarmony v3.0.5 and earlier, with the issue in the softbus_client_stub of the communication subsystem. The root cause is an authentication bypass that enables an “SA relay attack,” allowing a local attacker to bypass authentication and target oth...

7.8CVSS7.1AI score0.00183EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/01/09 2:23 a.m.•34 views

CVE-2023-0035 softbus_client_stub in communication subsystem has an authentication bypass vulnerability which allows an "SA relay attack".

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

6.5CVSS8AI score0.00183EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•6 views

CVE-2023-0035: Improper Authentication

softbusclientstub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

7.8CVSS5.7AI score0.00183EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•4 views

CVE-2023-0036: Improper Authentication

platformcallbackstub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege...

7.8CVSS5.7AI score0.00183EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/01/09 12:00 a.m.•14 views

Huawei EulerOS: Security Advisory for dbus (EulerOS-SA-2023-1031)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS7.1AI score0.01755EPSS
SaveExploits3References2
OpenVAS
OpenVAS
•added 2023/01/09 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2023-1008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8AI score0.02457EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2023/01/09 12:00 a.m.•33 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-1094)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.51733EPSS
SaveExploits2References2
Rows per page
Query Builder