Lucene search
+L

110 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in EventRelayEmitter (npm)

The package EventRelayEmitter was found to contain malicious code...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in ac-dom-emitter (npm)

The package ac-dom-emitter was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-13965 Malicious code in ac-dom-emitter (npm)

The package ac-dom-emitter was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:42 p.m.1 views

Malicious code in typespec-ts-interface-emitter (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/12 5:27 a.m.5 views

Malicious code in fake-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41407456feff64ada241bb9174752b12b3533a3827629a708296e06c3379fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References3
OSV
OSV
added 2024/12/12 5:27 a.m.5 views

MAL-2024-11804 Malicious code in fake-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41407456feff64ada241bb9174752b12b3533a3827629a708296e06c3379fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/12/08 5:55 p.m.4 views

Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
OSV
OSV
added 2024/12/08 5:55 p.m.9 views

MAL-2024-11247 Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Veracode
Veracode
added 2024/06/17 6:54 a.m.20 views

Heap Buffer Overflow

LibYAML is vulnerable to Heap buffer overflow. The vulnerability is due to the lack of proper initialization of the emitter when yamlemitteremit is called without yamlemitterinitialize. An attacker can exploit this vulnerability by providing specially crafted inputs to trigger the overflow,...

7.5AI score
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/13 12:0 a.m.2 views

PT-2024-26434 · Libyaml · Libyaml

Name of the Vulnerable Software and Affected Versions: libyaml version 0.2.5 Description: The issue is related to a Buffer Overflow vulnerability. It affects the yaml emitter emit function in the /src/libyaml/src/emitter.c file. The manipulation leads to a double-free. Recommendations: For libyam...

9.8CVSS8.6AI score
Exploits0References9
CVE
CVE
added 2024/06/13 12:0 a.m.56 views

CVE-2024-35326

CVE-2024-35326 is rejected/not used; this entry does not represent an active vulnerability.

9.4AI score
Exploits0
OSV
OSV
added 2024/05/10 11:7 a.m.5 views

OESA-2024-1551 libyaml security update

A C library for parsing and emitting YAML. Security Fixes: A vulnerability was found in yaml libyaml up to 0.2.5 and classified as critical. Affected by this issue is the function yamlemitteremitflowsequenceitem of the file /src/libyaml/src/emitter.c. The manipulation leads to heap-based buffer...

7.8AI score
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 5:6 a.m.5 views

SUSE CVE-2016-2338

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

9.8CVSS7.5AI score0.04644EPSS
Exploits3References3
RedhatCVE
RedhatCVE
added 2022/10/13 2:59 p.m.24 views

CVE-2016-2338

An exploitable heap overflow vulnerability was found in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on the tags array length. A specially constructed object passed as elements of tags array can increase th...

9.8CVSS1.8AI score0.04644EPSS
Exploits3References4
Snyk
Snyk
added 2022/09/29 1:47 p.m.3 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the startdocument function in psychemitter.c. Passing in a malicious tags array can trigger a crash. PoC: ruby require 'Psych' $tags = puts "+ Start" f = File.new"newfile", "w+" emitter = Psych::Emitter.new...

9.8CVSS7AI score0.04644EPSS
Exploits3References2
NVD
NVD
added 2022/09/29 3:15 a.m.29 views

CVE-2016-2338

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

9.8CVSS0.04644EPSS
Exploits3References3
OSV
OSV
added 2022/09/29 3:15 a.m.19 views

CVE-2016-2338

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

9.8CVSS7.1AI score
Exploits0References3
Prion
Prion
added 2022/09/29 3:15 a.m.14 views

Heap overflow

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

7.5CVSS7.4AI score0.04644EPSS
Exploits3References3Affected Software2
UbuntuCve
UbuntuCve
added 2022/09/29 3:15 a.m.28 views

CVE-2016-2338

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

9.8CVSS7.5AI score0.04644EPSS
Exploits3References2
OSV
OSV
added 2022/09/29 3:15 a.m.3 views

UBUNTU-CVE-2016-2338

An exploitable heap overflow vulnerability exists in the Psych::Emitter startdocument function of Ruby. In Psych::Emitter startdocument function heap buffer "head" allocation is made based on tags array length. Specially constructed object passed as element of tags array can increase this array...

9.8CVSS7.6AI score0.04644EPSS
Exploits3References3
Rows per page
Query Builder