Lucene search
+L

6389 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/03/12 8:25 p.m.•9 views

Malicious code in array-empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9923e27ee77980880cfc13a3c78c4903c58bed58f9257ac0407d57841fcc7853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/03/12 8:25 p.m.•12 views

MAL-2025-2308 Malicious code in empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f29eb4e06a456c0243473ddb4cf4b5953ab107489b4a79b5f3ccbebf67ebcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/03/12 8:25 p.m.•14 views

MAL-2025-2296 Malicious code in array-empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9923e27ee77980880cfc13a3c78c4903c58bed58f9257ac0407d57841fcc7853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2025/03/12 8:25 p.m.•14 views

MAL-2025-2307 Malicious code in empty-array-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 349e81874005a4e4ed11f5e452324e817f3fc61d4a22f5237445d562df83fb60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/03/11 3:49 a.m.•10 views

SUSE CVE-2023-52969

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2...

4.9CVSS7AI score0.00467EPSS
SaveExploits0References11
osv_azl
osv_azl
•added 2025/03/08 11:15 p.m.•15 views

AZL-58082 CVE-2023-52969 affecting package mariadb for versions less than 10.11.15-1

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2...

4.9CVSS7AI score0.00467EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/03/08 11:15 p.m.•15 views

AZL-58073 CVE-2023-52969 affecting package mariadb for versions less than 10.6.24-1

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2...

4.9CVSS7AI score0.00467EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/03/08 11:15 p.m.•12 views

DEBIAN-CVE-2023-52969

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2...

4.9CVSS6AI score0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/08 12:00 a.m.•17 views

CVE-2023-52969

MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty backtrace log. This may be related to makeaggrtablesinfo and optimizestage2...

4.9CVSS7.1AI score0.00467EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/08 12:00 a.m.•11 views

MariaDB 安全漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB that stems from sometimes crashing due to empty traceback logs, possibly related to makeaggrtablesinfo a...

4.9CVSS5AI score0.00467EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/03/06 11:35 a.m.•15 views

WordPress Homey theme <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check vulnerability

Limited Authentication Bypass due to Missing Empty Value Check vulnerability discovered by István Márton in WordPress Theme Homey versions = 2.4.3...

8.1CVSS7AI score0.00525EPSS
SaveExploits0References1Affected Software1
Amazon
Amazon
•added 2025/03/06 12:00 a.m.•15 views

Low: ecs-init

Issue Overview: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between t...

3.6CVSS6.7AI score0.00317EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/03/05 11:02 a.m.•44 views

CVE-2024-43061

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...

7.8CVSS7.3AI score0.00117EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/03/03 10:07 a.m.•48 views

CVE-2024-43061 Use After Free in Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...

7.8CVSS0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/03 10:07 a.m.•16 views

CVE-2024-43061 Use After Free in Audio

Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...

7.8CVSS7.9AI score0.00117EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•20 views

Qualcomm Chipsets 资源管理错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets, which originates from memory corruption during voice activation when sound model parameters are loaded from HLOS and the received sound model list is...

7.8CVSS6.9AI score0.00117EPSS
SaveExploits0References2
osv_bell
osv_bell
•added 2025/03/01 5:57 a.m.•7 views

BELL-CVE-2025-21817

Bulletin has no description...

5.5CVSS6AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/01 12:00 a.m.•7 views

CVE-2024-12824: Unverified Password Change

The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.6.2. This is due to the plugin not properly checking for an empty token value prior updating their details like password. This makes it...

9.8CVSS6.1AI score0.02389EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/02/27 3:12 a.m.•15 views

SUSE CVE-2022-49077

In the Linux kernel, the following vulnerability has been resolved: mmmremap.c: avoid pointless invalidaterangestart/end on mremapoldsize=0 If an mremap syscall with oldsize=0 ends up in movepagetables, it will call invalidaterangestart/invalidaterangeend unnecessarily, i.e. with an empty range...

5.5CVSS6.4AI score0.00253EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 3:09 a.m.•17 views

SUSE CVE-2022-49264

In the Linux kernel, the following vulnerability has been resolved: exec: Force single empty string when argv is empty Quoting1 Ariadne Conill: "In several other operating systems, it is a hard requirement that the second argument to execve2 be the name of a program, thus prohibiting a scenario...

5.5CVSS6.4AI score0.00305EPSS
SaveExploits0References10
Rows per page
Query Builder