Lucene search
+L

13009 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:14 p.m.8 views

Malicious code in console-less-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ece794298db615fecdf12771230e652484b7d626d61b19114cbc89431c3658a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:14 p.m.9 views

MAL-2022-6690 Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:14 p.m.10 views

Malicious code in twilio-chat-console-webapp.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ceaa7ff098d3318e69bf952690e21a038f0172d1d88c26b9c9882d9607f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:14 p.m.8 views

Malicious code in twilio-chat-console-webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d43b58f29b1c20f3fa4c8d6c56e87e0fe9432726d8b380b35b38b1f5deda3b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:09 p.m.5 views

Malicious code in oci-console-navigation-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4c9be92eab6d265532fc1a1b3545d52a3a0ac6f9ec5920f200a480ee7e5fda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:09 p.m.8 views

MAL-2022-5012 Malicious code in oci-console-navigation-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4c9be92eab6d265532fc1a1b3545d52a3a0ac6f9ec5920f200a480ee7e5fda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 6:20 p.m.5 views

Malicious code in console-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75d691d1462f2b538ed7fbcbcf4a22b5dbf3fc4a4cd35a57250adb24889db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 6:20 p.m.8 views

MAL-2022-2163 Malicious code in console-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75d691d1462f2b538ed7fbcbcf4a22b5dbf3fc4a4cd35a57250adb24889db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 7:27 a.m.6 views

Malicious code in ui-extensions-dev-console-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f16840f7273c569f73bfa9dbed041fcb7c6e26a8ae579a37e2a293da82a7aff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
CNVD
CNVD
added 2022/06/17 12:00 a.m.181 views

Cisco AppDynamics Controller Authorization Issues Vulnerability

Cisco AppDynamics Controller is Cisco's ability to monitor and analyze full-stack data through accurate tracking and analysis across a highly distributed application environment. Cisco AppDynamics Controller suffers from an authorization issue vulnerability that arises from incorrect authorizatio...

5.3CVSS7AI score0.01036EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/15 7:00 p.m.28 views

CVE-2022-31044 Plaintext Storage of Keys and Passwords in Rundeck and PagerDuty Process Automation

Rundeck is an open source automation service with a web console, command line tools and a WebAPI. The Key Storage converter plugin mechanism was not enabled correctly in Rundeck 4.2.0 and 4.2.1, resulting in use of the encryption layer for Key Storage possibly not working. Any credentials created...

7.5CVSS7.7AI score
SaveExploits0References3
Prion
Prion
added 2022/06/15 6:15 p.m.24 views

Authorization

A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This...

5CVSS5.4AI score0.01036EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/06/15 5:55 p.m.30 views

CVE-2022-20736 Cisco AppDynamics Controller Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This...

5.3CVSS5.7AI score0.01036EPSS
SaveExploits0References1
CVE
CVE
added 2022/06/15 5:55 p.m.87 views

CVE-2022-20736

The CVE-2022-20736 issue affects Cisco AppDynamics Controller web-based management interface. It stems from improper authorization checking for HTTP requests, allowing an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that should b...

5.3CVSS5.4AI score0.01036EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2022/06/15 4:00 p.m.28 views

Cisco AppDynamics Controller Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a configuration file and the login page for an administrative console that they would not normally have authorization to access. This...

5.3CVSS5.3AI score0.01036EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:00 a.m.15 views

The vulnerability of the Identity Console component of the Oracle Identity Manager software platform allows a perpetrator to create, delete, or alter access to critical data.

The vulnerability of the Identity Console component of the Oracle Identity Manager software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to create, delete, or alter access to critical data using the HTTP network protocol...

7.6CVSS7.5AI score0.00682EPSS
SaveExploits0References3Affected Software1
Citrix
Citrix
added 2022/06/15 12:00 a.m.14 views

su: nobody to pgxl in console

Citrix ADM instance constantly showing su: nobody to pgxl in console RCG-ISLBADM-PRI su: in promptechooff: tcgetarrt: Inappropriate ioctl for device RCG-ISLBADM su: nobody to pgxl...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/06/13 2:40 p.m.54 views

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.10.18 packages and security update

Red Hat OpenShift Container Platform release 4.10.18 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.10. Red Hat Product Security has rated this update as having a...

7.8CVSS6.8AI score0.03105EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/13 12:15 a.m.5 views

CVE-2022-2013

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...

7.5CVSS7.1AI score0.00891EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/06/13 12:15 a.m.11 views

CVE-2022-2013

In Octopus Server after version 2022.1.1495 and before 2022.1.2647 if private spaces were enabled via the experimental feature flag all new users would have access to the Script Console within their private space...

7.5CVSS7.1AI score0.00891EPSS
SaveExploits0References1
Rows per page
Query Builder