408 matches found
EUVD-2024-1200
Malicious code in bioql PyPI...
EUVD-2024-54845
Malicious code in bioql PyPI...
Malicious Package
Overview @openzeppelin-compact/fungible-token is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
Linux Distros Unpatched Vulnerability : CVE-2023-40014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using ERC2771Context...
Missing Origin Validation
org.apache.zeppelin, zeppelin-shell is vulnerable to Missing Origin Validation. The vulnerability is due to lack of origin validation in WebSocket connections, which allows an attacker to access the Zeppelin server from another origin and retrieve internal information about paragraphs...
Improper Input Validation
org.apache.zeppelin, zeppelin-jdbc is vulnerable to Improper Input Validation. The vulnerability is due to incomplete JDBC URL validation that failed to handle URL encoded input, which allows an attacker to bypass validation checks and potentially exploit database connections...
Cross-Site Scripting (XSS)
org.apache.zeppelin, zeppelin-web is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to an incomplete blacklist of user input, which allows an attacker to inject malicious scripts and execute them in a victim’s browser...
Malicious code in zeppelin-pebble-tfb084-project (npm)
The package zeppelin-pebble-tfb084-project was found to contain malicious code...
Malicious code in yurt-zeppelin-tf28 (npm)
The package yurt-zeppelin-tf28 was found to contain malicious code...
Malicious code in zeppelin-juniper-1e1m (npm)
The package zeppelin-juniper-1e1m was found to contain malicious code...
Malicious code in zeppelin-jacket-pci332-project (npm)
The package zeppelin-jacket-pci332-project was found to contain malicious code...
Malicious code in rainbow-zeppelin-ryi019-project (npm)
The package rainbow-zeppelin-ryi019-project was found to contain malicious code...
Malicious code in zeppelin-zenith-zsx845-project (npm)
The package zeppelin-zenith-zsx845-project was found to contain malicious code...
Malicious code in zeppelin-underpass-dzsc (npm)
The package zeppelin-underpass-dzsc was found to contain malicious code...
Malicious code in zeppelin-xerophyte-8cxj (npm)
The package zeppelin-xerophyte-8cxj was found to contain malicious code...
Malicious code in zeppelin-nymph-wpa677-project (npm)
The package zeppelin-nymph-wpa677-project was found to contain malicious code...
Malicious code in zeppelin-dragon-iuz288-project (npm)
The package zeppelin-dragon-iuz288-project was found to contain malicious code...
Malicious code in zeppelin-zenith-apn318-project (npm)
The package zeppelin-zenith-apn318-project was found to contain malicious code...