Lucene search
K

9 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/20 4:32 a.m.3 views

Malicious code in clob-client-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71cb09660dc0e81eb08d723da80d7cbe9f2390137596cfead83820db53f0674 The package clob-client-sdks was found to contain malicious code. Source: ghsa-malware 2ff610e554b6569926182810264eb97b765d9c2fde7e3a53fc3c8e16388b79...

5.7AI score
Exploits0References1
OSV
OSV
added 2026/03/20 4:32 a.m.1 views

MAL-2026-1942 Malicious code in clob-client-sdks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d71cb09660dc0e81eb08d723da80d7cbe9f2390137596cfead83820db53f0674 The package clob-client-sdks was found to contain malicious code. Source: ghsa-malware 2ff610e554b6569926182810264eb97b765d9c2fde7e3a53fc3c8e16388b79...

5.7AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-7257

Malicious code in bioql PyPI...

5.9CVSS5.8AI score0.00119EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/22 10:10 p.m.3 views

CVE-2022-39199

immudb is a database with built-in cryptographic proof and verification. immudb client SDKs use server's UUID to distinguish between different server instance so that the client can connect to different immudb instances and keep the state for multiple servers. SDK does not validate this uuid and...

5.9CVSS6.7AI score0.00119EPSS
Exploits0References1
OSV
OSV
added 2022/12/22 10:30 p.m.16 views

GO-2022-1117 Insufficient verification of proofs in github.com/codenotary/immudb

In certain scenarios, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list of...

5.4CVSS5.1AI score0.00126EPSS
Exploits1References4
NVD
NVD
added 2022/11/23 6:15 p.m.11 views

CVE-2022-36111

immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a...

5.4CVSS0.00126EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/11/21 8:38 p.m.26 views

Lack of proper validation of server UUID can be used by the server to trick the client to accept invalid proofs

Impact immudb client SDKs use server's UUID to distinguish between different server instance so that the client can connect to different immudb instances and keep the state for multiple servers. SDK does not validate this uuid and can accept any value reported by the server. A malicious server ca...

5.9CVSS5.7AI score0.00119EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/11/21 8:38 p.m.14 views

GHSA-6CQJ-6969-P57X Lack of proper validation of server UUID can be used by the server to trick the client to accept invalid proofs

Impact immudb client SDKs use server's UUID to distinguish between different server instance so that the client can connect to different immudb instances and keep the state for multiple servers. SDK does not validate this uuid and can accept any value reported by the server. A malicious server ca...

5.8CVSS5.4AI score0.00119EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2017/01/11 4:30 p.m.44 views

Moderate: Red Hat Security Advisory: Red Hat Mobile Application Platform 4.2.1 Security Update - SDKs and RPMs

Updated packages that provide Red Hat Mobile Application Platform 4.2.1, fixed several bugs, and added various enhancements that are now available from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring Syste...

9.8CVSS7.8AI score0.14336EPSS
Exploits3References5
Rows per page
Query Builder