3829 matches found
Malicious code in chai-schema-plutology-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1af430a378f890314e0bea7438fcf10fcaf30c0fc8e9081257df836dd6841a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sagitta-schema-release-it-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e806b764b2423062a8953ab5a69c4836580fe7b128531cebe88d4b643a30555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189264 Malicious code in rocket-polaris-prettier-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e15bc048395a61f688ffa84069166c241328128e1fb0ab74bb9951a999d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186747 Malicious code in enif-axios-schema-biotechnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1aa20538098eb6552d01fad1a88faa22ff2b7e24c3c19f05a7101d9ebbf5dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
GHSA-7CX5-254X-CGRQ Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
PT-2025-46823
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.1 PostgreSQL versions prior to 17.7 PostgreSQL versions prior to 16.11 PostgreSQL versions prior to 15.15 PostgreSQL versions prior to 14.20 PostgreSQL versions prior to 13.23 Description A flaw exists in the...
Siemens SIMATIC S7-1500 Reachable Assertion (CVE-2021-27212)
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service daemon exit via a short timestamp. This is related to schemainit.c and checkTime. This plugin only works...
Vulnerability in core server (CVE-2025-12817)
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, fro...
BIT-PARSE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0, Parse...
EUVD-2025-122221
Malicious code in schema-zenobia-lint-staged-postcss npm...
EUVD-2025-111638
Malicious code in lint-winston-schema-passport npm...
EUVD-2025-112257
Malicious code in jasmine-less-loader-schema-wasat npm...
EUVD-2025-114803
Malicious code in css-loader-kaus-prettier-plugin-markdown-schema npm...
EUVD-2025-116613
Malicious code in apex-yildun-iota-schema npm...
EUVD-2025-120944
Malicious code in unuk-schema-cross-env-browserify npm...
EUVD-2025-113115
Malicious code in graphql-chai-schema-elara npm...
EUVD-2025-120855
Malicious code in ursa-schema-norma-subscription npm...