MINI-CVC7-62M5-W389

Bulletin has no description...

MINI-WRC4-RPX4-CVC5

Bulletin has no description...

Malicious code in strawberry-cvc-project (npm)

The package strawberry-cvc-project was found to contain malicious code...

MAL-2025-34028 Malicious code in strawberry-cvc-project (npm)

The package strawberry-cvc-project was found to contain malicious code...

DEBIAN-CVE-2024-37795

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...

UBUNTU-CVE-2024-37795

A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service DoS via a crafted SMT-LIB input file containing the set-logic command with specific formatting errors...

cvc.cervantes.es Cross Site Scripting vulnerability OBB-3888816

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cvc.cervantes.es Cross Site Scripting vulnerability OBB-3876446

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cvc-components.com Cross Site Scripting vulnerability OBB-3401534

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-1405 Delta Electronics CNCSoft Stack-based Buffer Overflow

CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition...

PT-2020-20952

Name of the Vulnerable Software and Affected Versions ember-power-timepicker version 1.0.8 Description The issue concerns malicious code in the ember-power-timepicker package that, when executed in a browser, can extract sensitive information such as password, cvc, and card number fields from...

PT-2020-21174

Name of the Vulnerable Software and Affected Versions radic-util version 1.0.2 Description The issue concerns malicious code in the radic-util package that, when executed in a browser, can extract sensitive information such as password, cvc, and card number fields from forms. This information is...

PT-2020-21420

Name of the Vulnerable Software and Affected Versions geoheat version 1.3.2 Description The issue concerns malicious code in version 1.3.2 of geoheat. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the extracted values to the...

PT-2020-21042

Name of the Vulnerable Software and Affected Versions angular-location-update version 0.0.3 Description The issue concerns malicious code in version 0.0.3 of angular-location-update. When executed in a browser, this code enumerates password, cvc, and cardnumber fields from forms and sends the...

Malicious Package in cal_rd

Version 0.1.1 of rccal contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment. It's also recommended t...

PT-2020-21441

Name of the Vulnerable Software and Affected Versions @fangrong/xoc version 1.0.6 Description The issue concerns malicious code in version 1.0.6 of @fangrong/xoc. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21599

Name of the Vulnerable Software and Affected Versions ngx-context-menu version 0.0.26 Description The issue concerns malicious code in version 0.0.26 of ngx-context-menu. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends t...

PT-2020-20943

Name of the Vulnerable Software and Affected Versions rc cal version 0.1.1 Description The issue concerns malicious code in version 0.1.1 of rc cal. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the extracted values to...

PT-2020-21370

Name of the Vulnerable Software and Affected Versions iie-viz version 1.0.4 Description The issue concerns malicious code in version 1.0.4 of the iie-viz package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms and sends the...

PT-2020-21289

Name of the Vulnerable Software and Affected Versions uploader-plugin version 1.0.2 Description The issue concerns malicious code in the uploader-plugin that, when executed in a browser, can extract sensitive information such as password, cvc, and cardnumber fields from forms. This extracted data...