Lucene search
+L

8928 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/11 3:35 a.m.9 views

Malicious code in @self-sell/components (npm)

The package @self-sell/components was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb15f4ae1c1a830e2fdc21bd8a903fe2e14978eb9952f1e5b3f98f0ca7f353f Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/09/11 12:00 a.m.14 views

ALSA-2025:15699 Moderate: mysql-selinux and mysql8.4 security update

MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fixes: openssl:...

7.5CVSS7.1AI score0.01287EPSS
SaveExploits2References107
OSV
OSV
added 2025/09/10 2:15 p.m.5 views

CVE-2025-10231

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions...

7.8CVSS5.9AI score0.00127EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/10 1:34 p.m.9 views

Malicious code in @dtpk-cc/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b1e4b6fe7f3d42a2752aea1642dd9191f6afeb4dcca96ef97a65b5af5cb192 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
OSV
OSV
added 2025/09/10 1:34 p.m.2 views

MAL-2025-47000 Malicious code in @dtpk-cc/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0b1e4b6fe7f3d42a2752aea1642dd9191f6afeb4dcca96ef97a65b5af5cb192 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
OSV
OSV
added 2025/09/10 1:15 p.m.7 views

CVE-2025-10220

Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...

9.3CVSS6.1AI score0.00735EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/10 1:15 p.m.12 views

CVE-2025-10220

Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...

9.8CVSS0.00735EPSS
SaveExploits0References1
CVE
CVE
added 2025/09/10 12:28 p.m.31 views

CVE-2025-10220

CVE-2025-10220 affects AxxonSoft Axxon One VMS 2.0.0–2.0.4 on Windows due to use of unmaintained third‑party NuGet components (e.g., Google.Protobuf, DynamicData, System.Runtime.CompilerServices.Unsafe). The underlying issue is reliance on unmaintained third‑party packages, enabling remote code e...

9.8CVSS7.4AI score0.00735EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/10 12:28 p.m.6 views

CVE-2025-10220 Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4

Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...

9.8CVSS7.4AI score0.00735EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/10 12:28 p.m.19 views

CVE-2025-10220 Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4

Use of Unmaintained Third Party Components CWE-1104 in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable third-party packages such as...

9.8CVSS0.00735EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-6698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android...

5.5CVSS6.3AI score0.00419EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2021-26719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and...

6.5CVSS6.7AI score0.01355EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/10 12:00 a.m.10 views

AxxonSoft AxxonOne 安全漏洞

AxxonSoft AxxonOne is a video surveillance and security management software from AxxonSoft Ireland. A security vulnerability exists in AxxonSoft AxxonOne version 2.0.4 and earlier, which stems from the use of unmaintained third-party components and could lead to the execution of arbitrary code or...

9.8CVSS7.3AI score0.00735EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2017-0504

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver...

9.3CVSS8.1AI score0.00863EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/10 12:00 a.m.14 views

PT-2025-37038

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One VMS versions 2.0.0 through 2.0.4 Description: The software uses unmaintained third-party components in its NuGet dependencies. This allows a remote attacker to execute arbitrary code or bypass security features by exploiti...

9.8CVSS7.3AI score0.00735EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2017-0505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver...

9.3CVSS8.1AI score0.01427EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2016-6748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android...

5.5CVSS6.3AI score0.00367EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2016-6751

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android...

5.5CVSS6.3AI score0.00367EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/09 9:15 p.m.11 views

CVE-2025-23343

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering...

9.8CVSS5.8AI score0.00736EPSS
SaveExploits0References3
NVD
NVD
added 2025/09/09 9:15 p.m.8 views

CVE-2025-23343

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to write files to restricted components. A successful exploit of this vulnerability may lead to information disclosure, denial of service, and data tampering...

9.8CVSS0.00736EPSS
SaveExploits0References3
Rows per page
Query Builder