Lucene search
+L

412 matches found

OSV
OSV
added 2024/06/25 12:44 p.m.8 views

MAL-2024-2441 Malicious code in grunt-frontend-packager (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:44 p.m.3 views

Malicious code in grunt-frontend-packager (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/11/23 10:25 p.m.7 views

Malicious code in grunt-ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2023/11/23 10:25 p.m.18 views

MAL-2023-8592 Malicious code in grunt-ac-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee5b34eed1211ec1daf03801aa41a40775a16812380c42cd332d788e4a55d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/25 9:44 p.m.5 views

Malicious code in grunt-heremaps-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebaf028ac6b37df270050931b5b8f28eccfbfc7f8d88bd84ca5a52919e604bc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2023/04/07 12:00 a.m.17 views

Debian: Security Advisory (DLA-3386-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.4AI score0.00571EPSS
SaveExploits1References3
Debian
Debian
added 2023/04/06 1:00 p.m.65 views

[SECURITY] [DLA 3386-1] grunt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3386-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 06, 2023 https://wiki.debian.org/LTS -...

7.1CVSS5.7AI score0.00571EPSS
SaveExploits1
OSV
OSV
added 2023/04/06 12:00 a.m.23 views

DLA-3386-1 grunt - security update

Bulletin has no description...

7.1CVSS5.6AI score0.00571EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/04/06 12:00 a.m.21 views

Debian: Security Advisory (DLA-3383-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.2AI score0.00299EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2023/04/06 12:00 a.m.27 views

Debian dla-3386 : grunt - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3386 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3386-1 [email protected] https://www.debian.org/lts/security/...

7.1CVSS6.6AI score0.00571EPSS
SaveExploits1References4
Debian
Debian
added 2023/04/05 8:00 p.m.76 views

[SECURITY] [DLA 3383-1] grunt security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3383-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb April 05, 2023 https://wiki.debian.org/LTS -...

7.8CVSS7.2AI score0.00299EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2023/02/08 12:00 a.m.26 views

Ubuntu: Security Advisory (USN-5847-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.02285EPSS
SaveExploits3References2
Ubuntu
Ubuntu
added 2023/02/07 6:56 p.m.81 views

USN-5847-1: Grunt vulnerabilities

It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. CVE-2020-7729 It was discovered that Grunt was not properly handling symbolic links when performing file copy operations. An attacker could...

7.8CVSS7.1AI score0.02285EPSS
SaveExploits3
OSV
OSV
added 2023/02/07 6:56 p.m.4 views

USN-5847-1 grunt vulnerabilities

It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to execute arbitrary code. CVE-2020-7729 It was discovered that Grunt was not properly handling symbolic links when performing file copy operations. An attacker could...

7.8CVSS7AI score0.02285EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2023/02/07 12:00 a.m.40 views

Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM : Grunt vulnerabilities (USN-5847-1)

The remote Ubuntu 18.04 ESM / 20.04 ESM / 22.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5847-1 advisory. It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue t...

7.8CVSS7.2AI score0.02285EPSS
SaveExploits3References4
OSV
OSV
added 2022/11/11 11:05 a.m.6 views

OESA-2022-2048 nodejs-grunt security update

Grunt is the JavaScript task runner. Why use a task runner? In one word: automation. The less work you have to do when performing repetitive tasks like minification, compilation, unit testing, linting, etc, the easier your job becomes. After you've configured it, a task runner can do most of that...

7.1CVSS7.3AI score0.02285EPSS
SaveExploits1References2
Veracode
Veracode
added 2022/10/17 7:32 a.m.15 views

Prototype Pollution

grunt-karma is vulnerable to prototype pollution. The vulnerability is due to the exports functions in grunt-karma.js where an attacker cam injects properties into the existing JavaScript construct prototype...

9.8CVSS8.8AI score0.01733EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/10/14 12:00 p.m.61 views

GHSA-HCJ4-XF6X-63WJ Grunt-karma vulnerable to prototype pollution

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

9.8CVSS9.4AI score0.01733EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/10/14 12:00 p.m.28 views

Grunt-karma vulnerable to prototype pollution

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

9.8CVSS6.9AI score0.01733EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2022/10/14 11:15 a.m.28 views

CVE-2022-37602

Prototype pollution vulnerability in karma-runner grunt-karma 4.0.1 via the key variable in grunt-karma.js...

9.8CVSS0.01733EPSS
SaveExploits1References3
Rows per page
Query Builder