Lucene search
K

12 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/20 4:53 a.m.6 views

Malicious code in security-env-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2b538ca6f5582ba25c054253f091eacca05571066d7237d6f693f23938e37c Package impersonates the popular dotenv library identical description and repo URL git://github.com/motdotla/dotenv.git and exposes a matching config...

5.7AI score
Exploits0References2
OSV
OSV
added 2026/05/20 4:53 a.m.5 views

MAL-2026-4665 Malicious code in security-env-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf2b538ca6f5582ba25c054253f091eacca05571066d7237d6f693f23938e37c Package impersonates the popular dotenv library identical description and repo URL git://github.com/motdotla/dotenv.git and exposes a matching config...

5.7AI score
Exploits0References2
Cvelist
Cvelist
added 2026/03/10 12:0 a.m.25 views

CVE-2026-26742

PX4 Autopilot versions 1.12.x through 1.15.x contain a protection mechanism failure in the "Re-arm Grace Period" logic. The system incorrectly applies the in-air emergency re-arm logic to ground scenarios. If a pilot switches to Manual mode and re-arms within 5 seconds default configuration of an...

0.00265EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-59808

Malicious code in bioql PyPI...

6.3AI score0.00143EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/09/18 11:40 p.m.2 views

SUSE CVE-2023-53168

In the Linux kernel, the following vulnerability has been resolved: usb: ucsiacpi: Increase the command completion timeout Commit 130a96d698d7 "usb: typec: ucsi: acpi: Increase command completion timeout value" increased the timeout from 5 seconds to 60 seconds due to issues related to alternate...

5.5CVSS6.5AI score0.00143EPSS
Exploits0References5
NVD
NVD
added 2025/09/15 2:15 p.m.2 views

CVE-2023-53168

In the Linux kernel, the following vulnerability has been resolved: usb: ucsiacpi: Increase the command completion timeout Commit 130a96d698d7 "usb: typec: ucsi: acpi: Increase command completion timeout value" increased the timeout from 5 seconds to 60 seconds due to issues related to alternate...

5.5CVSS0.00143EPSS
Exploits0References3
OSV
OSV
added 2025/09/15 2:3 p.m.2 views

CVE-2023-53168 usb: ucsi_acpi: Increase the command completion timeout

In the Linux kernel, the following vulnerability has been resolved: usb: ucsiacpi: Increase the command completion timeout Commit 130a96d698d7 "usb: typec: ucsi: acpi: Increase command completion timeout value" increased the timeout from 5 seconds to 60 seconds due to issues related to alternate...

5.5CVSS6.2AI score0.00143EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2023/11/07 9:3 a.m.3 views

kernel: usb: ucsi_acpi: Increase the command completion timeout

In the Linux kernel, the following vulnerability has been resolved: usb: ucsiacpi: Increase the command completion timeout Commit 130a96d698d7 "usb: typec: ucsi: acpi: Increase command completion timeout value" increased the timeout from 5 seconds to 60 seconds due to issues related to alternate...

5.5CVSS6.7AI score0.00143EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2022/06/01 12:0 a.m.3 views

PT-2022-19484 · Unknown · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: BigBlueButton versions 2.2 through 2.3.17 BigBlueButton versions 2.4.0 Description: BigBlueButton is an open source web conferencing system. An attacker, who needs to be a participant in the meeting, could send messages to a locked chat withi...

4.3CVSS4.4AI score0.00777EPSS
Exploits0References12
CNNVD
CNNVD
added 2022/06/01 12:0 a.m.3 views

BigBlueButton 授权问题漏洞

BigBlueButton is an open source Web conferencing system from the BigBlueButton community. bigBlueButton has an authorization issue vulnerability that can be exploited by attackers to send messages to locked chats within a 5s grace period after lockdown settings take effect...

4.3CVSS5.6AI score0.00777EPSS
Exploits0References7
OSV
OSV
added 2019/03/28 5:29 p.m.0 views

UBUNTU-CVE-2019-5739

Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. The behavior in Node.js 6.16.0 and earlier is a potential Denial of Service DoS attack...

7.5CVSS6.7AI score0.0505EPSS
Exploits0References3
OSV
OSV
added 2018/11/14 8:29 p.m.2 views

CVE-2018-19279

PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater...

4.3CVSS5.8AI score0.00212EPSS
Exploits0References1
Rows per page
Query Builder