Lucene search
K

28 matches found

OSV
OSV
added 2025/10/29 10:46 p.m.1 views

MAL-2025-48972 Malicious code in acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b71a81b10d7836d7a4aeb72b36d2d7c0a4c94e7697d47254dc9c15ecd803bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References4
EUVD
EUVD
added 2025/10/29 10:46 p.m.3 views

EUVD-2025-36830

Malicious code in @acme-types/acme-package npm...

6.6AI score
Exploits0References1
Snyk
Snyk
added 2025/10/29 10:46 p.m.2 views

Malicious Package

Overview acme-package is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:46 p.m.4 views

Malicious code in acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b71a81b10d7836d7a4aeb72b36d2d7c0a4c94e7697d47254dc9c15ecd803bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References4
EUVD
EUVD
added 2025/10/29 10:46 p.m.2 views

EUVD-2025-36835

Malicious code in acme-package npm...

6.6AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:46 p.m.4 views

Malicious code in @acme-types/acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b754e0118dde98a24e6f1ea46eb2ed30d7b59cd938fbc627e6dc4429251482 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References4
Snyk
Snyk
added 2025/10/29 10:46 p.m.1 views

Malicious Package

Overview @acme-types/acme-package is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

9.8CVSS6.8AI score
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2020-14258

Malware in sbrugna...

9.6CVSS9.1AI score0.02815EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-13993

Malware in sbrugna...

6.1CVSS6.3AI score0.00617EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 3:19 p.m.6 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS7.3AI score0.02815EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 3:18 p.m.4 views

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.1CVSS6.3AI score0.00617EPSS
Exploits0
NVD
NVD
added 2023/04/04 3:15 p.m.11 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS9.3AI score0.02815EPSS
Exploits0References2
OSV
OSV
added 2023/04/04 3:15 p.m.9 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS9.4AI score
Exploits0References2
Prion
Prion
added 2023/04/04 3:15 p.m.17 views

Cross site scripting

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

6.8CVSS9.2AI score0.02815EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2023/04/04 12:0 a.m.9 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.3AI score0.02815EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/04/04 12:0 a.m.2 views

pfSense 跨站脚本漏洞

pfSense is a set of network firewalls based on FreeBSD Linux. A security vulnerability exists in Netgate pfSense version 2.4.4, ACME package v.0.6.3. An attacker can exploit this vulnerability to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.6CVSS8.9AI score0.02815EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/04/04 12:0 a.m.5 views

CVE-2020-21487

Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acmecertificates.php...

9.4AI score0.02815EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/04/04 12:0 a.m.5 views

PT-2023-11591 · Pfsense +1 · Pfsense +1

Name of the Vulnerable Software and Affected Versions: pfSense version 2.4.4 ACME package version 0.6.3 Description: A Cross Site Scripting issue allows attackers to execute arbitrary code via the RootFolder field of "acme certificates.php". Recommendations: For pfSense version 2.4.4, update the...

9.6CVSS9.1AI score0.02815EPSS
Exploits0References4
NVD
NVD
added 2022/12/15 7:15 p.m.19 views

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.1CVSS0.00617EPSS
Exploits0References2
OSV
OSV
added 2022/12/15 7:15 p.m.10 views

CVE-2020-21219

Cross Site Scripting XSS vulnerability in Netgate pf Sense 2.4.4-Release-p3 and Netgate ACME package 0.6.3 allows remote attackers to to run arbitrary code via the RootFolder field to acmecertificateedit.php page of the ACME package...

6.1CVSS6.3AI score
Exploits0References2
Rows per page
Query Builder