Lucene search
+L

89 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/19 12:00 a.m.•3 views

CVE-2023-32208: Undefined Security Weakness

Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...

5.3CVSS5.8AI score0.00524EPSS
SaveExploits0References1
OSV
OSV
•added 2023/05/10 12:00 a.m.•14 views

UBUNTU-CVE-2023-32208

Service workers could reveal script base URL due to dynamic import. This vulnerability affects Firefox 113...

5.3CVSS6.4AI score0.00524EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/05/09 12:00 a.m.•4 views

PT-2023-2864

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 113 Firefox ESR affected versions not specified Description The issue is related to a lack of protection for service worker data, which could allow a remote attacker to disclose protected information through the use o...

5.3CVSS0.00524EPSS
SaveExploits0
Huntr
Huntr
•added 2023/04/27 7:52 a.m.•46 views

RCE in developer mode

Description Nuxt contains a test-component-wrapper component. This is used to mount a single component for testing. This component has a dynamic import function which accepts arbitrary user input on the server side. This pattern will almost always lead to an RCE bug. Requirements & Notes The serv...

7.5CVSS6.9AI score0.58648EPSS
SaveExploits2References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/08/19 3:55 a.m.•7 views

Malicious code in babel-lugin-dynamic-i9port-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15795da980aca09e89837d11f5565a68c61e5b779062fae4eb410f3a24bddbc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/08/19 3:55 a.m.•13 views

MAL-2022-1404 Malicious code in babel-lugin-dynamic-i9port-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15795da980aca09e89837d11f5565a68c61e5b779062fae4eb410f3a24bddbc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/08/19 3:55 a.m.•12 views

MAL-2022-1444 Malicious code in bablpluginsyntaxdynamicimport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c59572f2bc92d923ebe87aeee4cc1ccb84e1e60c29e5f6fbe6a0ca8bda407b8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2021/05/28 9:15 p.m.•11 views

CVE-2021-32619

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. In Deno versions 1.5.0 to 1.10.1, modules that are dynamically imported through import or new Worker might have been able to bypass network and file system permission checks when statically importing other modules...

9.8CVSS7AI score0.01113EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/05/28 12:00 a.m.•24 views

Deno 授权问题漏洞

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and is built with Rust. An authorization issue vulnerability exists in Deno versions 1.5.0 through 1.10.1, which arises from the fact that modules dynamically imported via import or new...

9.8CVSS8.2AI score0.01113EPSS
SaveExploits0References2
Rows per page
Query Builder