Lucene search
+L

1340 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/28 3:57 p.m.•9 views

Malicious code in js-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc4563d5bd3e84486a04f455708e6480fadf633778880ca2710f2778aafad55c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/02/27 3:07 a.m.•12 views

SUSE CVE-2022-49412

In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq changes between the moment we decide two queues are worth to merge and set bic-stablemergebfqq and the moment bfqsetupmerge is called. This...

5.5CVSS6.5AI score0.0028EPSS
SaveExploits0References7
OSV
OSV
•added 2025/02/26 7:01 a.m.•17 views

UBUNTU-CVE-2022-49412

In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq changes between the moment we decide two queues are worth to merge and set bic-stablemergebfqq and the moment bfqsetupmerge is called. This...

7.8CVSS6AI score0.0028EPSS
SaveExploits0References9
OSV
OSV
•added 2025/02/26 2:12 a.m.•18 views

CVE-2022-49412 bfq: Avoid merging queues with different parents

In the Linux kernel, the following vulnerability has been resolved: bfq: Avoid merging queues with different parents It can happen that the parent of a bfqq changes between the moment we decide two queues are worth to merge and set bic-stablemergebfqq and the moment bfqsetupmerge is called. This...

7.8CVSS5.3AI score
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/19 7:32 a.m.•8 views

Malicious code in jetpack-e2e-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe798df756e79d2deb6db29c4675b6e0255d8d3607198c924e2ecb4a485b671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/19 7:28 a.m.•10 views

Malicious code in norequest-akash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510b9a55bb5d3edb3f9ec11a61f72939b8f5b05e64d976cb49b378118bb12e1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/19 7:09 a.m.•10 views

Malicious code in unmoderated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f2bf868d2780e6b4d8a00b1e6f3c4385994e32d71be80b2efd5d4636bbc0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/24 9:49 a.m.•10 views

Malicious code in lexical-esm-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808bb38341306bbd08d655abd9928c5cf279412658db15774579d78f195f5a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/23 1:50 p.m.•10 views

Malicious code in equipment-icon-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a99f570aa2c31d84f2b2e487af42792418ce952fac2bc39d603ad1899f27230f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/22 4:30 p.m.•10 views

Malicious code in op-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75870385e27f624816db6a388a5a188640a523bb7d967dbb848ac33dda21b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/21 7:47 a.m.•7 views

Malicious code in aem-spa-component-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b1b3d4405a0ea27ac00cb9f96e4e70aa642f96018fa9b52508da4e98f1a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:37 a.m.•10 views

Malicious code in mafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ea964aacb2b5c5379853082d486a78cca6643183ea87eb0d617881910d7e5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/20 7:27 a.m.•7 views

Malicious code in jsexports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f561855348de37f202d4723acf874ab865606f3de38f9cc4ed3d91dc415e5368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/01/16 11:22 p.m.•10 views

Malicious code in karma-fest-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12fc59d44987dfafc3d0226a2629d1aa8294664f22936a59406d8e77b6695b2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Circl
Circl
•added 2025/01/15 1:17 p.m.•14 views

CVE-2024-57898

creationtimestamp| type| source ---|---|--- 2025-01-15 13:17:08+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrtzdgdkr2b 2025-01-15 13:47:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfrvq5ymqx2u 2025-01-15 14:22:18+00:00|...

3.3CVSS6.7AI score0.00184EPSS
SaveExploits0References6
Patchstack
Patchstack
•added 2025/01/07 6:54 a.m.•18 views

WordPress Same but Different – Related Posts by Taxonomy plugin <= 1.0.16 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Same but Different – Related Posts by Taxonomy versions = 1.0.16...

6.1CVSS6.3AI score0.00354EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•2 views

CVE-2024-56290: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in silverplugins217 Multiple Shipping And Billing Address For Woocommerce different-shipping-and-billing-address-for-woocommerce allows SQL Injection.This issue affects Multiple Shipping And Billing...

9.3CVSS5.8AI score0.004EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•18 views

PT-2025-1645 · WordPress · Same But Different – Related Posts By Taxonomy

Name of the Vulnerable Software and Affected Versions: Same but Different – Related Posts by Taxonomy plugin for WordPress versions up to, and including, 1.0.16 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg and remove query arg without...

6.1CVSS6.7AI score0.00354EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•3 views

CVE-2024-11363: Improper Neutralization of Input During Web Page Generation

The Same but Different – Related Posts by Taxonomy plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated...

6.1CVSS6AI score0.00354EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/12/19 11:48 a.m.•8 views

Malicious code in healenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab4597abf70195617218b4366cc4e83ea35770e784027c1909b352f258da5b8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder