Lucene search
+L

3908 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.6 views

Malicious code in alphavantage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a52cf3eeac571578098a28579582b63109d138c2459095052076787de9db956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.6 views

MAL-2022-947 Malicious code in alphachain-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce8ea7b7f8ae4e859804add4dc811e00cdf84a6b70123d0415ce67ce2ef7493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.6 views

MAL-2022-844 Malicious code in ada-balance-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6727c4df16febb1399cae1caa5604a2441a91be359ed453d105095de36d6bb03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.7 views

MAL-2022-948 Malicious code in alphavantage-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a52cf3eeac571578098a28579582b63109d138c2459095052076787de9db956 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.6 views

Malicious code in accuweather-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd2d43078275d0d6cca7d9291adde69d021f469bddf2c8970db4f1d7d24ca96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.4 views

Malicious code in xbto-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 770fd82916af600433e97fa8d4e2a161b28dabd08484723434b21e45c6543c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.3 views

Malicious code in 1forge-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60733beacf4869567448dac63a54e5025293ca83f41cfdbfca52bb9f6071c1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.5 views

MAL-2022-7264 Malicious code in xbto-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 770fd82916af600433e97fa8d4e2a161b28dabd08484723434b21e45c6543c67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.5 views

MAL-2022-20 Malicious code in 1forge-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60733beacf4869567448dac63a54e5025293ca83f41cfdbfca52bb9f6071c1a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.12 views

MAL-2022-823 Malicious code in accuweather-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd2d43078275d0d6cca7d9291adde69d021f469bddf2c8970db4f1d7d24ca96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 6:20 p.m.3 views

Malicious code in npm-maven-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d0b627fb66c58a57cb2b61506f3422f154134c762e0bba3946787e888e1636 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 6:20 p.m.9 views

MAL-2022-4936 Malicious code in npm-maven-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d0b627fb66c58a57cb2b61506f3422f154134c762e0bba3946787e888e1636 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Veracode
Veracode
added 2022/06/20 6:48 a.m.32 views

Authentication Bypass

parse-server is vulnerable to authentication bypass. The vulnerability exists because the certificate in auth adapter is not properly validated. An attacker is able to bypass authentication checks by making a fake certificate accessible via certain Apple domains and providing the URL to that...

8.6CVSS7.1AI score0.00824EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2022/06/15 1:15 p.m.5 views

CVE-2022-20133

In setDiscoverableTimeout of AdapterService.java, there is a possible bypass of user interaction due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.2AI score0.00144EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/06/15 12:0 a.m.7 views

PT-2022-14372 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a missing permission check in the setDiscoverableTimeout function of AdapterService.java. This could lead to a bypass of user interaction, resulting in local...

7.8CVSS7.4AI score0.00144EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/06/15 12:0 a.m.85 views

SIEMENS Teamcenter Hardcoded Default Credentials Vulnerability

Teamcenter software is a modern, adaptable product lifecycle management PLM system that connects people and processes across functional silos through digital threads to enable innovation.SIEMENS Teamcenter is vulnerable to a hard-coded default credential vulnerability that originates in the Java ...

8.8CVSS2.2AI score0.01256EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2022/05/24 10:28 p.m.5 views

@nexus-switchboard/nexus-conn-jira (>=0.1.0 <=0.2.2), @nexus-switchboard/nexus-mod-service (>=0.4.1 <=0.6.3) +1 more potentially affected by CVE-2021-26073 via atlassian-connect-express (>=3.5.2 <=4.4.1)

atlassian-connect-express NPM version =3.5.2, =0.1.0, =0.4.1, =0.0.1, =2.0.5 Source cves: CVE-2021-26073 Source advisory: OSV:GHSA-4V96-M8XV-X83V...

7.7CVSS7.1AI score0.00915EPSS
SaveExploits0
vulnersOsv
vulnersOsv
added 2022/05/24 10:1 p.m.8 views

at.porscheinformatik.zanata:common (>=4.7.0 <=4.7.8), at.porscheinformatik.zanata:stub-server (>=4.7.0 <=4.7.8) +516 more potentially affected by CVE-2020-1695 via org.jboss.resteasy:resteasy-client (>=3.0.0.Final <=3.11.5.Final)

org.jboss.resteasy:resteasy-client MAVEN version =3.0.0.Final, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =4.7.0, =1.1.9, =1.0.0.Final, =1.0.3.Final and more Source cves: CVE-2020-1695 Source advisory: OSV:GHSA-63CQ-PPQ8-CW6G...

7.5CVSS7AI score0.02023EPSS
SaveExploits0
NVD
NVD
added 2022/05/16 6:15 p.m.27 views

CVE-2022-1679

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS0.00813EPSS
SaveExploits2References4
OSV
OSV
added 2022/05/16 6:15 p.m.8 views

CVE-2022-1679

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system...

7.8CVSS7.5AI score
SaveExploits0References4
Rows per page
Query Builder