Lucene search
+L

1934 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/04 7:46 a.m.6 views

Malicious code in bitcoin-address-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bb543ed42a9c4e7386578dde42e2f9f8c6274c88b87358bff00e48a6fa2ea87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/09/04 7:46 a.m.8 views

MAL-2024-8744 Malicious code in bitcoin-address-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bb543ed42a9c4e7386578dde42e2f9f8c6274c88b87358bff00e48a6fa2ea87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/04 7:46 a.m.7 views

Malicious code in litecoin-address-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2f4c4e8a02044ac141a2794e470da413b18acaaa68ae8f39b8276e2b74a95b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/04 12:0 a.m.6 views

PT-2024-10103

Name of the Vulnerable Software and Affected Versions rsync affected versions not specified Description The issue is related to an uncontrolled resource consumption in the rsync repository validator FORT. It can be exploited by a remote attacker to elevate their privileges. A malicious RPKI rsync...

9.8CVSS6.6AI score0.00481EPSS
SaveExploits0References28
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.11 views

FORT Validator 安全漏洞

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from dereferencing a pointer without first cleaning it up...

7.5CVSS6.3AI score0.00305EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.9 views

FORT Validator 安全漏洞

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from unavailable route origin validation...

7.5CVSS6.3AI score0.00452EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.6 views

FORT Validator 安全漏洞

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3 that stems from accessing elements of a collection without first cleaning them...

7.5CVSS6.3AI score0.00481EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.7 views

FORT Validator 安全漏洞

FORT Validator is an RPKI dependency and RTR server from NICMx Open Source. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from not properly cleaning up string lengths, resulting in a buffer overflow...

9.8CVSS6.7AI score0.00356EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.9 views

FORT Validator 安全漏洞

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3, which stems from dereferencing a pointer without first cleaning it up...

7.5CVSS6.3AI score0.00481EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/08/24 12:0 a.m.7 views

FORT Validator 安全漏洞

FORT Validator is a NICMx open source RPKI dependency and RTR server. A security vulnerability exists in FORT Validator versions prior to 1.6.3 that stems from dereferencing pointers...

7.5CVSS6.3AI score0.00305EPSS
SaveExploits0References3
Veracode
Veracode
added 2024/08/16 7:58 a.m.9 views

Missing Cryptographic Equivocation

github.com/cosmos/gaia is vulnerable to Missing Cryptographic Equivocation. The vulnerability is caused due to an issue in the Interchain Security ICS module that could result in the slashing of a validator for an "old" equivocation...

7AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/08/14 6:8 p.m.21 views

GHSA-RHM7-7469-RCPW Persistent Cross-site Scripting in eZ Platform Rich Text Field Type

Impact The validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open, and the check can be circumvented using upper case. Content editing permissions for RichText content is required to exploit this vulnerability, which...

7.2CVSS6.8AI score0.00367EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
added 2024/08/14 6:8 p.m.21 views

Persistent Cross-site Scripting in Ibexa RichText Field Type

Impact The validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open, and the check can be circumvented using upper case. Content editing permissions for RichText content is required to exploit this vulnerability, which...

7.2CVSS6.8AI score0.00367EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/13 12:0 a.m.9 views

PT-2024-34153 · Symfony +5 · Symfony/Validator +5

Name of the Vulnerable Software and Affected Versions: symfony/validator versions 5.4.43, 6.4.11, and 7.1.4 Description: The symfony/validator module in the Symphony PHP framework is vulnerable to a regex bypass issue. It is possible to trick a Validator configured with a regular expression using...

8.8CVSS6.4AI score0.6322EPSS
SaveExploits1References56
Veracode
Veracode
added 2024/07/31 5:25 a.m.13 views

Cross-Site Scripting (XSS)

typo3/cms is vulnerable to Cross-Site Scripting XSS. The vulnerability is caused due to a lack of sanitization of content from editors. This allows attackers with valid editor accounts to inject malicious scripts into content scanned by the link validator component...

6.3AI score
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2024/07/23 12:0 a.m.9 views

Unspecified Vulnerability in RADIUS Protocol under RFC 2865

RADIUS Protocol under RFC 2865 is an RFC open source networking protocol. A security vulnerability exists in RADIUS Protocol under RFC 2865, which can be exploited by an attacker to modify any valid response Access-Accept, Access-Reject, or Access-Challenge to any other response using a Choice...

9CVSS7.1AI score0.14859EPSS
SaveExploits2References1
OSV
OSV
added 2024/07/12 12:0 a.m.22 views

OPENSUSE-SU-2024:14152-1 python310-openapi-spec-validator-0.7.1-1.3 on GA media

These are all security issues fixed in the python310-openapi-spec-validator-0.7.1-1.3 package on the GA media of openSUSE Tumbleweed...

9.8CVSS9.7AI score0.0561EPSS
SaveExploits1References1
OSV
OSV
added 2024/06/28 3:28 p.m.18 views

GO-2024-2927 Evmos is missing create validator check in github.com/evmos/evmos

Evmos is missing create validator check in github.com/evmos/evmos...

8.1CVSS3.9AI score0.0044EPSS
SaveExploits0References3
OSV
OSV
added 2024/06/25 1:49 p.m.7 views

MAL-2024-6718 Malicious code in attr-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:49 p.m.5 views

Malicious code in attr-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder