Lucene search
K

22 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/01 4:16 p.m.3 views

Malicious code in hpi-porsche-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89589737b4001caa57e131f557999bed39bd5bdc13de932d5988f194508cfc7b The package hpi-porsche-app was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/12/01 4:16 p.m.1 views

MAL-2025-191510 Malicious code in hpi-porsche-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89589737b4001caa57e131f557999bed39bd5bdc13de932d5988f194508cfc7b The package hpi-porsche-app was found to contain malicious code...

6.8AI score
Exploits0
EUVD
EUVD
added 2025/12/01 4:16 p.m.1 views

EUVD-2025-200059

Malicious code in hpi-porsche-app npm...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1034

Malware in sbrugna...

9.8CVSS6AI score0.00297EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/22 12:39 a.m.3 views

CVE-2015-10017

A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch...

9.8CVSS7.7AI score0.00297EPSS
Exploits0References1
OSV
OSV
added 2025/02/28 10:36 a.m.2 views

USN-7294-3 linux-ibm vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

9.1CVSS7AI score0.18032EPSS
Exploits2References145
OSV
OSV
added 2025/02/27 5:37 p.m.4 views

USN-7294-2 linux-aws, linux-oracle, linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - ACPI drivers; - Drivers core; - ATA over ethernet AOE driver; - TPM...

9.1CVSS6.8AI score0.18032EPSS
Exploits2References145
NVD
NVD
added 2023/01/06 11:15 a.m.12 views

CVE-2015-10017

A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch...

9.8CVSS7AI score0.00297EPSS
Exploits0References3
Prion
Prion
added 2023/01/06 11:15 a.m.14 views

Sql injection

A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch...

7.5CVSS8AI score0.00297EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/06 10:26 a.m.12 views

CVE-2015-10017 HPI-Information-Systems ProLOD sql injection

A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch...

5.5CVSS9.9AI score0.00297EPSS
Exploits0References3
CVE
CVE
added 2023/01/06 10:26 a.m.39 views

CVE-2015-10017

CVE-2015-10017 affects HPI-Information-Systems ProLOD. An attacker can exploit SQL injection by manipulating the affected argument (this) in unknown code paths. The CVE is rated CRITICAL (CVSS v3.1: 9.8) with network attack vector, no privileges, no user interaction required, and impacts to confi...

9.8CVSS8AI score0.00297EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/06 12:0 a.m.2 views

PT-2023-10196 · Hpi Information Systems · Hpi-Information-Systems Prolod

Name of the Vulnerable Software and Affected Versions: HPI-Information-Systems ProLOD affected versions not specified Description: A critical issue has been found, affecting unknown code. The manipulation of the this argument leads to SQL injection. Recommendations: Apply the patch with the name...

9.8CVSS8.4AI score0.00297EPSS
Exploits0References6
vulnersOsv
vulnersOsv
added 2021/08/03 7:0 p.m.3 views

@alex.garcia/oak (>=0.0.17 <=0.0.19), @apify/better-sqlite3-prebuilds (=7.1.1) +195 more potentially affected by CVE-2021-32803 via tar (>=4.0.1 <=4.4.13)

tar NPM version =4.0.1, =0.0.17, =0.0.1, =0.2.0, =0.2.0, =3.0.7, =3.0.6, =1.4.0, =1.0.0, =1.0.0-alpha.1, =1.10.9-beta, =1.0.0, =1.1.4, =2.1.0, =2.2.0 and more Source cves: CVE-2021-32803 Source advisory: OSV:GHSA-R628-MHMH-QJHW...

8.2CVSS6.7AI score0.00122EPSS
Exploits0
Openbugbounty
Openbugbounty
added 2019/10/06 2:49 p.m.6 views

hpi-mdf.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-988215 Security Researcher geeknik Helped patch 8753 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting hpi-mdf.com website and its...

0.1AI score
Exploits0
OSV
OSV
added 2018/07/23 7:29 p.m.17 views

CVE-2018-1999006

A exposure of sensitive information vulnerability exists in Jenkins 2.132 and earlier, 2.121.1 and earlier in Plugin.java that allows attackers to determine the date and time when a plugin HPI/JPI file was last extracted, which typically is the date of the most recent installation/upgrade...

4.3CVSS6.1AI score
Exploits0References1
Hewlett-Packard
Hewlett-Packard
added 2018/07/06 12:0 a.m.31 views

HPSBHF03586 rev. 1 - DCI Policy Update

Potential Security Impact Information disclosure and escalation of privilege via limited physical presence. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel platforms, starting with Skylake, support a USB 3-based debugging interface a.k.a. Direct...

7.6CVSS0.5AI score0.00145EPSS
Exploits0
Openbugbounty
Openbugbounty
added 2018/03/25 7:21 a.m.12 views

versatile-hpi-solutions.com XSS vulnerability

Open Bug Bounty ID: OBB-590841 Description| Value ---|--- Affected Website:| versatile-hpi-solutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
Exploits0
Fedora
Fedora
added 2015/10/07 6:24 a.m.26 views

[SECURITY] Fedora 22 Update: openhpi-3.4.0-2.fc22

OpenHPI is an open source project created with the intent of providing an implementation of the SA Forum's Hardware Platform Interface HPI. HPI provides an abstracted interface to managing computer hardware, typically f or chassis and rack based servers. HPI includes resource modeling; access to ...

4.7CVSS1.3AI score0.00097EPSS
Exploits0
Prion
Prion
added 2011/05/03 7:55 p.m.9 views

Memory corruption

Array index error in the asihpihpiioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service memory corruption or possibly gain privileges via a crafted adapter index value that triggers acce...

7.2CVSS7.1AI score0.00049EPSS
Exploits2References5Affected Software1
Cvelist
Cvelist
added 2011/05/03 7:0 p.m.15 views

CVE-2011-1169

Array index error in the asihpihpiioctl function in sound/pci/asihpi/hpioctl.c in the AudioScience HPI driver in the Linux kernel before 2.6.38.1 might allow local users to cause a denial of service memory corruption or possibly gain privileges via a crafted adapter index value that triggers acce...

8.7AI score0.00049EPSS
Exploits2References5
Rows per page
Query Builder