Lucene search
K

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/16 12:37 a.m.1 views

Malicious code in bignumber-tool.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81863c7d661d7e537eb4cafb3e74ae83b61483b4617c03f6a4283d34ce651102 The package bignumber-tool.js was found to contain malicious code. Source: ghsa-malware...

5.7AI score
Exploits0References1
Snyk
Snyk
added 2026/03/16 12:37 a.m.1 views

Malicious Package

Overview bignumber-tool.js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2026/03/16 12:37 a.m.2 views

MAL-2026-1442 Malicious code in bignumber-tool.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81863c7d661d7e537eb4cafb3e74ae83b61483b4617c03f6a4283d34ce651102 The package bignumber-tool.js was found to contain malicious code. Source: ghsa-malware...

5.7AI score
Exploits0References1
OSV
OSV
added 2024/11/29 3:32 a.m.5 views

MAL-2024-11132 Malicious code in crypto-bignumber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb07bdcd8a1158c33a46eefd3724fe1ec53b7ed6c4cba581fdda9deb084c0af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/29 3:32 a.m.2 views

Malicious code in crypto-bignumber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb07bdcd8a1158c33a46eefd3724fe1ec53b7ed6c4cba581fdda9deb084c0af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Veracode
Veracode
added 2023/01/11 4:24 a.m.21 views

Regular Expression Denial Of Service (ReDoS)

terminal-kit is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used in multiple functions of the library, allowing an attacker to crash the application by providing a malicious strings such as '^'.repeatbigNumber...

7.5CVSS3.9AI score0.00492EPSS
Exploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2015/04/16 3:39 p.m.3 views

openssl: Bignum squaring may produce incorrect results

It was found that OpenSSL's BigNumber Squaring implementation could produce incorrect results under certain special conditions. This flaw could possibly affect certain OpenSSL library functionality, such as RSA blinding. Note that this issue occurred rarely and with a low probability, and there i...

5CVSS6.6AI score0.07282EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2015/01/23 12:0 a.m.37 views

CentOS Update for openssl CESA-2015:0066 centos6

Check the version of openssl SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882101";...

5CVSS6.7AI score0.91945EPSS
Exploits0References2
Rows per page
Query Builder