Lucene search
+L

4540 matches found

Github Security Blog
Github Security Blog
added 2020/09/01 8:32 p.m.36 views

Malicious Package in react-dates-sc

Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found installed you...

6.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/01 8:31 p.m.35 views

Malicious Package in rc-calendar-jhorst

Version 8.4.3 of rc-calendar-jhorst contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 8.4.3 of this module is found installed y...

6.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/01 8:29 p.m.48 views

Malicious Package in oauth-validator

Version 1.0.2 of oauth-validator contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed you...

6.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/01 8:29 p.m.10 views

GHSA-CXCF-78MR-WPG7 Malicious Package in oauth-validator

Version 1.0.2 of oauth-validator contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed you...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 8:28 p.m.30 views

Malicious Package in modlibrary

Version 0.1.1 of modlibrary contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.1.1 of this module is found installed you will...

6.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/01 8:27 p.m.13 views

GHSA-7XFQ-XH6V-4MRM Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.10 of this module is found installed yo...

9.8CVSS7.1AI score
SaveExploits0References1
OSV
OSV
added 2020/09/01 8:26 p.m.13 views

GHSA-9CQ4-MHMR-84GM Malicious Package in jasmin

Version 0.0.3 of jasmin contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.3 of this module is found installed you will want...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 7:55 p.m.22 views

Malicious Package in dossier

Version 0.0.4 of dossier contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.4 of this module is found installed you will wan...

3.1AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/01 7:54 p.m.29 views

Malicious Package in dynamo-schema

Version 0.0.3 of dynamo-schema contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.3 of this module is found installed you wi...

2.9AI score
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/01 7:53 p.m.23 views

Malicious Package in css_transform_step

Version 1.0.6 of csstransformstep contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.6 of this module is found installed you...

6.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/01 7:52 p.m.16 views

GHSA-45CP-HPC9-8347 Malicious Package in css_transform_support

Version 1.0.2 of csstransformsupport contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.2 of this module is found installed...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/01 7:51 p.m.18 views

Malicious Package in cordova-plugin-china-picker

Version 1.0.910 of cordova-plugin-china-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.910 of this module is foun...

2.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/01 7:50 p.m.25 views

Malicious Package in coffee-project

Version 1.7.5 of coffee-project contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.7.5 of this module is found installed you...

6.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/01 7:46 p.m.20 views

Malicious Package in another-date-range-picker

Version 4.1.48 of another-date-range-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 4.1.48 of this module is found...

2.9AI score
SaveExploits0References5Affected Software1
OSV
OSV
added 2020/09/01 7:46 p.m.12 views

GHSA-8RXG-9G6F-VQ9P Malicious Package in another-date-range-picker

Version 4.1.48 of another-date-range-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 4.1.48 of this module is found...

9.8CVSS7.1AI score
SaveExploits0References4
OSV
OSV
added 2020/09/01 7:44 p.m.12 views

GHSA-2P62-C4RM-MR72 Malicious Package in another-date-picker

Version 2.0.43 of another-date-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.43 of this module is found installe...

9.8CVSS7.1AI score
SaveExploits0References4
OSV
OSV
added 2020/09/01 7:43 p.m.15 views

GHSA-QMXF-FXQ7-W59F Malicious Package in angular-material-sidenav-rnd

Version 0.1.1 of angular-material-sidenav-rnd contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.1.1 of this module is found...

9.8CVSS7.1AI score
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2020/09/01 7:42 p.m.25 views

Malicious Package in angular-bmap

Version 0.0.9 of angular-bmap contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.0.9 of this module is found installed you wil...

2.9AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/09/01 7:41 p.m.15 views

GHSA-C82C-8PJW-6829 Malicious Package in @impala/bmap

Version 1.0.3 of @impala/bmap contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.3 of this module is found installed you wil...

9.8CVSS7.1AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2020/08/28 12:0 a.m.5 views

PT-2020-5768 · Yaws +1 · Yaws +1

Name of the Vulnerable Software and Affected Versions: Yaws versions 1.81 through 2.0.7 Description: The issue is related to the CGI implementation in the Yaws web server, which is associated with incorrect cleaning of CGI requests. This can allow a remote attacker to access confidential data,...

10CVSS9.4AI score0.17374EPSS
SaveExploits4References29
Rows per page
Query Builder