Lucene search
+L

1553 matches found

OSV
OSV
•added 2023/04/03 4:39 a.m.•14 views

MAL-2023-21 Malicious code in @12build/product-api-ts-axios-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 336e30b4abb921976acb4a16517a2a6f2ad668fafe7e41d16b63dbba221feaa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/03/15 2:00 a.m.•9 views

MAL-2023-907 Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/03/15 2:00 a.m.•6 views

Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
Snyk
Snyk
•added 2023/03/13 8:18 a.m.•6 views

Malicious Package

Overview ts-infra-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/10 12:00 a.m.•16 views

PT-2023-12208 · Unknown · Stoqey Gnuplot

Name of the Vulnerable Software and Affected Versions: Stoqey gnuplot versions 0.0.3 and earlier Description: An issue in Stoqey gnuplot allows attackers to execute arbitrary code via the src/index.ts, plotCallack, child process, and/or filePath parameters. Recommendations: For Stoqey gnuplot...

9.8CVSS9.6AI score0.01127EPSS
SaveExploits1References7
Snyk
Snyk
•added 2023/03/01 8:18 a.m.•3 views

Malicious Package

Overview tanker-ts-i18n is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Veracode
Veracode
•added 2023/02/25 9:19 p.m.•29 views

Denial Of Service (DoS)

efox is vulnerable to Denial of Service DoS attacks. A remote attacker is able to cause denial of service conditions via crafted TS payload with an incorrect selector length...

6.5CVSS6.3AI score0.01606EPSS
SaveExploits1References7Affected Software1
NVD
NVD
•added 2023/02/21 4:15 p.m.•22 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.3AI score0.01606EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/02/21 4:15 p.m.•34 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.7AI score0.01606EPSS
SaveExploits1References2
Prion
Prion
•added 2023/02/21 4:15 p.m.•28 views

Code injection

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

4CVSS6.3AI score0.01606EPSS
SaveExploits1References4Affected Software2
Snyk
Snyk
•added 2023/02/21 8:16 a.m.•6 views

Malicious Package

Overview harel-token-ts is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
•added 2023/02/21 8:16 a.m.•5 views

Malicious Package

Overview harel-logger-ts is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...

9.8CVSS7.1AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/02/21 12:00 a.m.•30 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.7AI score0.01606EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•1 views

CVE-2023-23009: Uncontrolled Resource Consumption

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.7AI score0.01606EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2023/02/21 12:00 a.m.•33 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.4AI score0.01606EPSS
SaveExploits1
OSV
OSV
•added 2023/02/21 12:00 a.m.•27 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.4AI score
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2023/02/21 12:00 a.m.•67 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.6AI score0.01606EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2023/02/21 12:00 a.m.•6 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.4AI score0.01606EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:25 a.m.•18 views

SUSE CVE-2014-9425

Double free vulnerability in the zendtshashgracefuldestroy function in zendtshash.c in the Zend Engine in PHP through 5.5.20 and 5.6.x through 5.6.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

7.5CVSS7.1AI score0.03664EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 5:20 a.m.•10 views

SUSE CVE-2015-2830

arch/x86/kernel/entry64.S in the Linux kernel before 3.19.2 does not prevent the TSCOMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the 1 fork or 2 close system call, as demonstrated b...

1.9CVSS6.2AI score0.0041EPSS
SaveExploits0References12
Rows per page
Query Builder