Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-19498

Malware in sbrugna...

9.1CVSS7.4AI score0.00117EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 6:34 p.m.6 views

CVE-2021-32700

Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.x and SL releases up to alpha 3 have a potential for a supply chain attack via MiTM against users. Http connections did not make use of TLS and certificate checking was ignored...

9.1CVSS6.9AI score0.00117EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:29 p.m.2 views

Malicious code in ballerina-grammar (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2024/06/25 12:29 p.m.3 views

MAL-2024-1808 Malicious code in ballerina-grammar (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSV
OSV
added 2021/06/22 8:15 p.m.11 views

CVE-2021-32700

Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.x and SL releases up to alpha 3 have a potential for a supply chain attack via MiTM against users. Http connections did not make use of TLS and certificate checking was ignored...

7.4CVSS6.9AI score
Exploits0References2
NVD
NVD
added 2021/06/22 8:15 p.m.10 views

CVE-2021-32700

Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.x and SL releases up to alpha 3 have a potential for a supply chain attack via MiTM against users. Http connections did not make use of TLS and certificate checking was ignored...

9.1CVSS0.00117EPSS
Exploits0References2
Prion
Prion
added 2021/06/22 8:15 p.m.8 views

Code injection

Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.x and SL releases up to alpha 3 have a potential for a supply chain attack via MiTM against users. Http connections did not make use of TLS and certificate checking was ignored...

5.8CVSS7.4AI score0.00117EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2021/06/22 7:30 p.m.15 views

CVE-2021-32700 Supply chain attack via MiTM against users

Ballerina is an open source programming language and platform for cloud application programmers. Ballerina versions 1.2.x and SL releases up to alpha 3 have a potential for a supply chain attack via MiTM against users. Http connections did not make use of TLS and certificate checking was ignored...

9.1CVSS9.3AI score0.00117EPSS
Exploits0References2
CVE
CVE
added 2021/06/22 7:30 p.m.63 views

CVE-2021-32700

CVE-2021-32700 affects the Ballerina platform. Vulnerable in: Ballerina 1.2.x and Swan Lake (SL) releases up to alpha 3. Issue: HTTP connections did not perform TLS/certificate checks, enabling a MITM to substitute or modify packages from the BC registry and inject malicious code into ballerina e...

9.1CVSS7.6AI score0.00117EPSS
Exploits0References2Affected Software2
CNNVD
CNNVD
added 2021/06/22 12:0 a.m.1 views

Ballerina 访问控制错误漏洞

Ballerina is an open source programming language platform. Ballerina suffers from a security vulnerability that can be exploited by an attacker to replace or modify packages retrieved from BC, allowing malicious code to be injected into the Ballerina executable...

9.1CVSS7.4AI score0.00117EPSS
Exploits0References2
GitLab Advisory Database
GitLab Advisory Database
added 2021/06/22 12:0 a.m.15 views

Missing Authentication for Critical Function

The vulnerability allows an attacker to substitute or modify packages retrieved from BC thus allowing to inject malicious code into ballerina executables...

9.1CVSS4AI score0.00117EPSS
Exploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:54 a.m.12 views

Baby Hazel Ballerina Dance - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Baby Hazel Ballerina Dance published at the 'play' market has multiple vulnerabilities...

0.2AI score
Exploits0References1Affected Software1
Rows per page
Query Builder