Lucene search
+L

9643 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/16 6:56 a.m.4 views

Malicious code in cync-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4966e5375aab134fc7d97c79e8667f2b2078bdb3d0aada342eeffff6d9f59c20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/13 12:55 a.m.4 views

Malicious code in lucifoxero (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24e496d1286f59f364036c6adac3c875c49e090d2a787ad96a135a6b8476fb85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 11:24 a.m.6 views

Malicious code in everstake.one (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28abdd3e255919265b3c31fe76622c4b487b9bb26f98f9abb19f3f945e7bb5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 11:20 a.m.4 views

Malicious code in frappe-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd4c91421f9d8f397b84256da7d774eaa4de780d5790b0b17a27315cc7c8479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 10:56 a.m.5 views

Malicious code in dep_pre_install_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9804ef6cb7b86a741d99ebe417df5a6e18e0a73658daf4932f2d8bcf4052f07d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 10:56 a.m.3 views

Malicious code in dep_conf_tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81af9f674f57a93af5a9030b8e05949d3ee86a9a5fbb1c98c2ffa3c7384a7344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 10:56 a.m.6 views

Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/10 10:56 a.m.2 views

Malicious code in dependancy_confusion_test_tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9144894e475b05fd94cf378496c85c5358f742406f2806b68542b333658eecf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
added 2023/01/05 7:15 a.m.31 views

CVE-2022-44534

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system...

7.2CVSS7.2AI score0.01125EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/05 7:15 a.m.22 views

CVE-2022-44535

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate their privileges to those of an administrative user. A successful exploit could allow an attacker to achieve administrative privilege on the...

8.8CVSS8.8AI score0.00897EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/05 7:15 a.m.11 views

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS6.1AI score0.01437EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/05 7:15 a.m.7 views

CVE-2022-43536

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

8.8CVSS6.1AI score0.0141EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/05 7:15 a.m.26 views

CVE-2022-43536

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

8.8CVSS7.7AI score0.0141EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/05 7:15 a.m.20 views

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS7.2AI score0.01437EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/05 7:15 a.m.23 views

CVE-2022-43537

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS7.2AI score0.01437EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/05 7:15 a.m.25 views

Design/Logic Flaw

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

6.5CVSS8.7AI score0.0141EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/01/05 7:15 a.m.26 views

Design/Logic Flaw

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

5.8CVSS7.1AI score0.01437EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/01/05 7:15 a.m.25 views

Authentication flaw

A vulnerability in the Aruba EdgeConnect Enterprise Orchestrator web-based management interface allows remote low-privileged authenticated users to escalate their privileges to those of an administrative user. A successful exploit could allow an attacker to achieve administrative privilege on the...

6.5CVSS8.7AI score0.00897EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/01/03 8:05 p.m.29 views

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS7.4AI score0.01437EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/01/03 8:05 p.m.8 views

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

7.2CVSS7.6AI score0.01437EPSS
SaveExploits0References1
Rows per page
Query Builder