Lucene search
+L

19971 matches found

OSV
OSV
•added 2023/01/10 11:24 a.m.•10 views

MAL-2023-317 Malicious code in everstake.one (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28abdd3e255919265b3c31fe76622c4b487b9bb26f98f9abb19f3f945e7bb5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/10 11:20 a.m.•10 views

MAL-2023-460 Malicious code in frappe-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd4c91421f9d8f397b84256da7d774eaa4de780d5790b0b17a27315cc7c8479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/10 10:56 a.m.•11 views

MAL-2023-233 Malicious code in dep-conf-test-tal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11ab34becb955a22cbb02099997e4c3301a8dcfb0559a59ebcb0a32770e7bdc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/10 10:56 a.m.•16 views

MAL-2023-234 Malicious code in dep-conf-test-tal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b97fd877e41e24812639dbd001e200927c3673576a2de4c71c76cde33df0dda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/10 10:56 a.m.•9 views

MAL-2023-237 Malicious code in dep_confusion_test123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f5bc391a39cd114fa8cbec14792e02dbc7fdc132c33d675e5fe104568d81d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/01/10 4:42 a.m.•12 views

Malicious code in rdi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f20c03ef068f0a97e359f9541cdc83af91b639b9c235553b4b1e0ed9ce502f24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/10 4:42 a.m.•15 views

MAL-2023-506 Malicious code in hsbc-pb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68ebe89705d558966c9f1db1e54b394a9e60bfe6e26d00f31d9d5869849954ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/10 4:42 a.m.•14 views

MAL-2023-472 Malicious code in generic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f87fcdafcf972ad5460dfd5d8fca046c5d3c1545f8725f7dc18174de69c362 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Veracode
Veracode
•added 2023/01/10 2:54 a.m.•21 views

XML External Entity (XXE) Injection

kelvinmo/simplexrd is vulnerable to XML external entity attacks. The vulnerability exists because the library does not properly validate the XML documents submitted by the users via simplexrd.class.php, allowing an attacker to inject and execute malicious XML documents to perform requests on beha...

9.8CVSS9AI score0.00811EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2023/01/09 12:15 p.m.•30 views

CVE-2021-4311

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

9.8CVSS6.7AI score0.00669EPSS
SaveExploits0References4
Prion
Prion
•added 2023/01/09 12:15 p.m.•28 views

Xxe

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

7.5CVSS9.4AI score0.00669EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/09 11:20 a.m.•8 views

CVE-2021-4311 Talend Open Studio for MDM XML xml external entity reference

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

5.5CVSS9.6AI score0.00669EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/09 11:20 a.m.•40 views

CVE-2021-4311 Talend Open Studio for MDM XML xml external entity reference

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

5.5CVSS9.8AI score0.00669EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/09 6:14 a.m.•15 views

MAL-2023-52 Malicious code in @playgami/portal-dynamic-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9deabd3b5198948a51a1c164772947fe70aa65670b1ca24263fad525b65cbfc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/09 6:14 a.m.•12 views

MAL-2023-53 Malicious code in @playgami/portal-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 907fe1950fbf2f456611421a2b5ac23a26804dd21822c746e90b979257de05c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2023/01/09 1:49 a.m.•9 views

MAL-2023-271 Malicious code in donuts.node-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 589d937e738773f2893caf9608e4b93c3616dad1f93e5d6dc62834864e46182e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2023/01/09 12:00 a.m.•20 views

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2023-1106)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.5AI score0.41365EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/01/09 12:00 a.m.•14 views

Talend Open Studio for MDM 代码问题漏洞

Talend Open Studio for MDM is an open source software from Talend Open Source. It provides master data management, data management, integration and data quality in a single platform. A code issue vulnerability exists in Talend Open Studio for MDM that stems from unknown code in the component XML...

9.8CVSS6.3AI score0.00669EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/01/09 12:00 a.m.•12 views

PT-2023-12415 · Talend · Talend Open Studio For Mdm

Name of the Vulnerable Software and Affected Versions: Talend Open Studio for MDM affected versions not specified Description: A problematic vulnerability was found in the XML Handler component, leading to xml external entity reference. The estimated number of potentially affected devices worldwi...

9.8CVSS7AI score0.00669EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•1 views

CVE-2021-4311: Improper Restriction of XML External Entity Reference

A vulnerability classified as problematic was found in Talend Open Studio for MDM. This vulnerability affects unknown code of the component XML Handler. The manipulation leads to xml external entity reference. The patch is identified as 31d442b9fb1d518128fd18f6e4d54e06c3d67793. It is recommended ...

9.8CVSS5.3AI score0.00669EPSS
SaveExploits0References3
Rows per page
Query Builder