Lucene search
K

12 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-1506

Malware in sbrugna...

7.5CVSS7.5AI score0.00577EPSS
Exploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in @zalastax/nolb-ced (npm)

The package @zalastax/nolb-ced was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-10882 Malicious code in @zalastax/nolb-ced (npm)

The package @zalastax/nolb-ced was found to contain malicious code...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/06 3:55 a.m.8 views

CVE-2021-39131

ced detects character encoding using Google’s compactencdet library. In ced v0.1.0, passing data types other than Buffer causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, verify it’s a Buffer using Buffer.isBuffero...

7.5CVSS6.6AI score0.00577EPSS
Exploits1References1
Openbugbounty
Openbugbounty
added 2023/06/12 4:54 p.m.11 views

ced-elec.co.uk Cross Site Scripting vulnerability OBB-3419787

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2022/08/31 1:19 p.m.15 views

ced-elec.co.uk Cross Site Scripting vulnerability OBB-2880262

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
Exploits0
Github Security Blog
Github Security Blog
added 2021/08/23 7:42 p.m.54 views

Improper Handling of Unexpected Data Type in ced

Impact In ced v0.1.0, passing data types other than Buffer causes the Node.js process to crash. Patches The problem has been patched in ced v1.0.0. You can upgrade from v0.1.0 without any breaking changes. Workarounds Before passing an argument to ced, verify it’s a Buffer using Buffer.isBufferob...

7.5CVSS7.3AI score0.00577EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2021/08/23 7:42 p.m.18 views

GHSA-27WQ-QX3Q-FXM9 Improper Handling of Unexpected Data Type in ced

Impact In ced v0.1.0, passing data types other than Buffer causes the Node.js process to crash. Patches The problem has been patched in ced v1.0.0. You can upgrade from v0.1.0 without any breaking changes. Workarounds Before passing an argument to ced, verify it’s a Buffer using Buffer.isBufferob...

7.5CVSS7.5AI score0.00577EPSS
Exploits1References5
OSV
OSV
added 2021/08/17 11:15 p.m.7 views

CVE-2021-39131

ced detects character encoding using Google’s compactencdet library. In ced v0.1.0, passing data types other than Buffer causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, verify it’s a Buffer using Buffer.isBuffero...

7.5CVSS6.7AI score
Exploits0References3
Prion
Prion
added 2021/08/17 11:15 p.m.11 views

Design/Logic Flaw

ced detects character encoding using Google’s compactencdet library. In ced v0.1.0, passing data types other than Buffer causes the Node.js process to crash. The problem has been patched in ced v1.0.0. As a workaround, before passing an argument to ced, verify it’s a Buffer using...

5CVSS7.4AI score0.00577EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2021/08/17 7:55 p.m.52 views

CVE-2021-39131

CVE-2021-39131 affects the ced JavaScript library used for character encoding detection. In ced v0.1.0, passing data types other than Buffer to ced crashes the Node.js process; this is the root cause. The issue is fixed in ced v1.0.0, with a recommended workaround: verify input is a Buffer (Buffe...

7.5CVSS7.4AI score0.00577EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2021/08/17 12:0 a.m.2 views

Github ced 输入验证错误漏洞

Github ced is a software application. Character encoding is detected using Google's compactencdet library. An Input Validation Error vulnerability exists in Github ced that stems from the product not doing valid validation of user input data types. An attacker could cause a Nodejs process to cras...

7.5CVSS7.3AI score0.00577EPSS
Exploits1References4
Rows per page
Query Builder