Lucene search
+L

2084 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/02/03 2:35 a.m.9 views

Malicious code in deobfuscatorv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1e176e65ad21fbd16a057338f01560423427a7c78b473d94ae700afc4fc171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/02/02 7:41 p.m.6 views

Malicious code in gateleen-hook-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5573ea2c726699d52d6500b6c16ed2c5f5650d90de8c3f4f5325a1c07d484a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/31 5:07 a.m.6 views

Malicious code in twikoo-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 808d64256118ccefab7ddecf052e3978523681777e309d786a03e1c2974405a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:00 a.m.12 views

The vulnerability of the Oracle Data Provider for .NET component in the Oracle Database Server database management system allows a hacker to gain full control over the application.

The vulnerability of the Oracle Data Provider for .NET component in the Oracle Database Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCPS protocol...

7.6CVSS6.9AI score0.00594EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:00 a.m.12 views

The vulnerability of Juniper Networks Junos OS routing devices of the SRX and EX series allows a attacker to execute arbitrary commands and gain full control over the device.

The vulnerability of Juniper Networks Junos OS routing devices of the SRX and EX series lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain full control over...

7.8CVSS7.5AI score0.00216EPSS
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 11:42 a.m.6 views

Malicious code in node-http-uatraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f641b192ea9d09801f965d0b2e909f40fbc483a2f115e45feafed0376029a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 11:42 a.m.7 views

Malicious code in taxi-localization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097d1cf9ae16e020a782ddabda9f4556107a34ffa87be84afde01f013fe2e52a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 11:42 a.m.7 views

MAL-2023-767 Malicious code in searchband-frontend-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf78480d464f5f670ccc0e60161d713925b077a538b1790e0ca75b27f3e1bc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 11:42 a.m.8 views

MAL-2023-550 Malicious code in karma-jquery2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55d521035684c4dbe2c48fd0ee90ce405fbfb292a771e6c278ad707668d648a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 11:42 a.m.10 views

MAL-2023-565 Malicious code in lego-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f68048b64d2f636d41c97edba1631e654e4141f21d4b318622cc529eb5197ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.7 views

Malicious code in tvmauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a220cc126d05697459cc479fd0a6c8ed0f1b740c0b7a7228e9b7d03161774e71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:05 a.m.7 views

Malicious code in malicious-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adfb94ffd01d87848b7f1bf2ae04932224574efbda30f7ae3ecd5520c4c57d95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/01/27 12:00 a.m.10 views

Vulnerability of the Cluster component: The internal operations of the Oracle MySQL Cluster database management system, which allows attackers to gain full control over the application.

Vulnerability of the Cluster component: The internal operations of the Oracle MySQL Cluster database management system are related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

6.5CVSS6.8AI score0.00605EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/27 12:00 a.m.16 views

The vulnerability of the Core server component of Oracle Communications Converged Application Server allows a hacker to gain full control over the application.

The vulnerability of the Core server component of Oracle Communications Converged Application Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application using the UDP network protocol...

10CVSS7.7AI score0.00839EPSS
SaveExploits0References3Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/24 10:21 p.m.6 views

Malicious code in testing-postinstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92117c1864ea6df0bfd00f9d5f2f45cd011b75117f4ba545096788dcc75c0a57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/18 2:38 a.m.6 views

Malicious code in speedtestgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fdcbf7a838d1ab8733a1da6605dfb92935f0b70f7feaf91b79aba1fa85b685f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/18 2:38 a.m.6 views

Malicious code in lagra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 425b64ce91b2bfc4d9dbd5e854c1aa054f5419aa6e4c89adc2e45cedcbc531ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/01/18 2:38 a.m.13 views

MAL-2023-796 Malicious code in speedtestis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28c743a96167f36c8645c17cc973c214e9917149cc43cf1c45ddd97e6219d783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2023/01/18 12:15 a.m.27 views

CVE-2022-46660

An unauthorized user could alter or write files with full control over the path and content of the file...

7.5CVSS7.7AI score0.00556EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/18 12:00 a.m.10 views

Proficy Historian 代码问题漏洞

GE Digital Proficy Historian is a powerful tool with storage analysis and data collection capabilities from GE Digital. A code issue vulnerability exists in Proficy Historian v7.0 and prior versions, which arises from a code issue that allows an unauthorized user to change or write files with ful...

7.5CVSS6.5AI score0.00556EPSS
SaveExploits0References3
Rows per page
Query Builder