Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1415 matches found

osv_pysec
osv_pysec•added 2021/04/06 7:15 p.m.•58 views

PYSEC-2021-111

projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...

8.1CVSS1.4AI score0.01392EPSS
SaveExploits0References3
Prion
Prion•added 2021/04/06 7:15 p.m.•34 views

Design/Logic Flaw

projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...

5.5CVSS8.2AI score0.01392EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2021/04/06 12:00 a.m.•5 views

CVE-2021-21423: Exposure of Version-Control Repository to an Unauthorized Control Sphere

projen is a project generation tool that synthesizes project configuration files such as package.json, tsconfig.json, .gitignore, GitHub Workflows, eslint, jest, and more, from a well-typed definition written in JavaScript. Users of projen's NodeProject project type including any project type...

8.1CVSS6.1AI score0.01392EPSS
SaveExploits0References2
CNNVD
CNNVD•added 2021/04/06 12:00 a.m.•22 views

Github projects security vulnerabilities

Github projen is a Github open source application. It synthesizes project configuration files. A security vulnerability exists in projen that allows any GitHub user to trigger the execution of untrusted code in the context of the "main" repository...

8.1CVSS8AI score0.01392EPSS
SaveExploits0References4
osv_debian
osv_debian•added 2021/03/26 10:15 p.m.•16 views

DEBIAN-CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

5.9CVSS6.7AI score0.01155EPSS
SaveExploits1References1
NVD
NVD•added 2021/03/26 10:15 p.m.•61 views

CVE-2021-21374

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to...

8.1CVSS0.0104EPSS
SaveExploits1References4
NVD
NVD•added 2021/03/26 10:15 p.m.•38 views

CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS0.01155EPSS
SaveExploits1References3
osv_cve
osv_cve•added 2021/03/26 10:15 p.m.•31 views

CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

5.9CVSS7AI score
SaveExploits0References3
attackerkb
attackerkb•added 2021/03/26 10:15 p.m.•13 views

CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS6.8AI score0.01155EPSS
SaveExploits1References4Affected Software1
Prion
Prion•added 2021/03/26 10:15 p.m.•27 views

Remote code execution

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

4.3CVSS6.2AI score0.01155EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve•added 2021/03/26 10:15 p.m.•24 views

CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS6.8AI score0.01155EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu•added 2021/03/26 10:15 p.m.•32 views

UBUNTU-CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS5.9AI score0.01155EPSS
SaveExploits1References3
Prion
Prion•added 2021/03/26 10:15 p.m.•36 views

Remote code execution

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to...

6.8CVSS8.2AI score0.0104EPSS
SaveExploits1References4Affected Software1
osv_ubuntu
osv_ubuntu•added 2021/03/26 10:15 p.m.•36 views

UBUNTU-CVE-2021-21374

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to...

8.1CVSS7.3AI score0.0104EPSS
SaveExploits1References3
attackerkb
attackerkb•added 2021/03/26 10:15 p.m.•12 views

CVE-2021-21374

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to...

8.1CVSS7.3AI score0.0104EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve•added 2021/03/26 10:15 p.m.•38 views

CVE-2021-21374

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to...

8.1CVSS7.2AI score0.0104EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2021/03/26 9:25 p.m.•43 views

CVE-2021-21373 Nimble falls back to insecure http url when fetching packages

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS8.4AI score0.01155EPSS
SaveExploits1References3
CVE
CVE•added 2021/03/26 9:25 p.m.•213 views

CVE-2021-21373

CVE-2021-21373 affects Nimble, the Nim package manager. The issue arises when nimble refresh fetches the package list over HTTPS but falls back to an insecure HTTP URL on error, enabling a MitM to deliver a malicious package list. If affected packages are installed, this can lead to untrusted cod...

7.5CVSS7.2AI score0.01155EPSS
SaveExploits1References3Affected Software1
Mend
Mend•added 2021/03/26 9:25 p.m.•13 views

CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS0.01155EPSS
SaveExploits1References5
Debian CVE
Debian CVE•added 2021/03/26 9:25 p.m.•86 views

CVE-2021-21373

Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, "nimble refresh" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker...

7.5CVSS6.8AI score0.01155EPSS
SaveExploits1
Rows per page
Query Builder