Lucene search
K

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/22 6:9 a.m.6 views

Malicious code in @druids/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071ce35c0d6a17c606e5448f4c485228df973342935b0a11519304050877edf5 The package's package.json declares a dependency ltidisafe resolved not from the npm registry but as a direct tarball URL:...

5.9AI score
Exploits0References1
NVD
NVD
added 2021/04/07 8:15 p.m.13 views

CVE-2013-1054

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus...

6.5CVSS0.00162EPSS
Exploits1References2
OSV
OSV
added 2021/04/07 8:15 p.m.0 views

UBUNTU-CVE-2013-1054

The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initialization callback. Fixed in 3.0.0+14.04.20140416-0ubuntu1.14.04.1 by shipping an empty package, thus...

6.5CVSS6.6AI score0.00162EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2021/04/07 8:15 p.m.29 views

CVE-2013-1055

The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an action to the launcher and updating it with new callbacks until the libunity-webapps rate limit was...

4.3CVSS5.8AI score0.00186EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/04/07 12:0 a.m.2 views

Firefox unity-firefox-extension 安全漏洞

Firefox unity-firefox-extension is a Firefox open source application plug-in . A security vulnerability exists in Firefox unity-firefox-extension that originates from sending an empty unity-firefox-extension package, which completely disables the extension and invalidates attacks against the libu...

4.3CVSS5.7AI score0.00186EPSS
Exploits1References3
OSV
OSV
added 2021/02/02 7:12 p.m.1 views

OPENSUSE-SU-2021:0231-1 Security update for segv_handler

This update for segvhandler fixes the following issues: - Replace by empty package with README explaining the removal for security reasons boo1180665. This update was imported from the openSUSE:Leap:15.2:Update update project...

7.2AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2012/12/18 1:55 a.m.18 views

CVE-2012-5609

Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.5.2 allows remote authenticated users to execute arbitrary PHP code by uploading a crafted mount.php file in a ZIP file...

6.5CVSS6.2AI score0.01029EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2012/09/05 11:55 p.m.21 views

CVE-2012-4395

Cross-site scripting XSS vulnerability in index.php in ownCloud before 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the redirecturl parameter...

4.3CVSS6AI score0.00254EPSS
Exploits1References2
Rows per page
Query Builder