Lucene search
+L

25 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/06/16 3:41 p.m.•13 views

Malicious code in strict-engine-peer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0913b30a168bfed09d3c5ae59aeaf6a305a395f86516fb1fb8ece60bb95904de On npm install, the package's preinstall hook preinstall: node index.js in package.json executes index.js, which reads the installer's project...

5.4AI score
SaveExploits0References2
OSV
OSV
•added 2026/06/16 3:41 p.m.•20 views

MAL-2026-5898 Malicious code in strict-engine-peer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0913b30a168bfed09d3c5ae59aeaf6a305a395f86516fb1fb8ece60bb95904de On npm install, the package's preinstall hook preinstall: node index.js in package.json executes index.js, which reads the installer's project...

5.4AI score
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-3215

Malware in sbrugna...

4.3CVSS5.6AI score0.01044EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2025-6113

Malicious code in bioql PyPI...

4.2CVSS6.3AI score0.00238EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•7 views

Linux Distros Unpatched Vulnerability : CVE-2021-22263

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.0 before 14.0.9, all versions starting from 14.1 before 14.1.4, all versions...

6.5CVSS6.3AI score0.01095EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 4:10 a.m.•14 views

CVE-2023-3914

A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects. A service account is not deleted when a namespace is deleted, allowing access to internal projects...

5.4CVSS6.4AI score0.00432EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 2:15 a.m.•12 views

CVE-2023-3915

An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 before 16.3.1. If an external user is given an owner role on any group, that external user may escalate their privilege...

7.2CVSS6.6AI score0.00682EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/03/28 10:02 a.m.•36 views

CVE-2024-12619 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

5.2CVSS0.00267EPSS
SaveExploits1References2
CVE
CVE
•added 2025/03/06 8:31 a.m.•116 views

CVE-2025-1540

GitLab CVE-2025-1540 affects GitLab CE/EE Self-Managed and Dedicated instances across all versions from 17.5 up to (but not including) 17.6.5, 17.7 up to 17.7.4, and 17.8 up to 17.8.2. The issue allows a user who is added as an External to read and clone internal projects under certain circumstan...

4.2CVSS6.7AI score0.00238EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/03/06 8:31 a.m.•15 views

CVE-2025-1540 Incorrect Authorization in GitLab

An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."...

3.1CVSS6.7AI score0.00238EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/03/06 8:31 a.m.•82 views

CVE-2025-1540

Removed by vendor...

4.2CVSS5.8AI score0.00238EPSS
SaveExploits1
OSV
OSV
•added 2023/08/14 4:15 a.m.•13 views

CVE-2023-40291

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

6.8CVSS5.8AI score0.00499EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/08/14 4:15 a.m.•6 views

CVE-2023-40291

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

6.8CVSS6.7AI score0.00499EPSS
SaveExploits1References2
NVD
NVD
•added 2023/08/14 4:15 a.m.•33 views

CVE-2023-40291

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

6.8CVSS6.8AI score0.00499EPSS
SaveExploits1References1
Prion
Prion
•added 2023/08/14 4:15 a.m.•32 views

Default credentials

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

4.6CVSS6.8AI score0.00499EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/14 12:00 a.m.•15 views

CVE-2023-40291

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name...

7.2AI score0.00499EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/12 9:15 a.m.•10 views

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS5.8AI score0.01384EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•3 views

CVE-2022-27241: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS6.3AI score0.01384EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/11 12:00 a.m.•14 views

GitLab 权限许可和访问控制问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab suffers from a permissions licensing and access...

6.5CVSS6.5AI score0.01095EPSS
SaveExploits1References4
Prion
Prion
•added 2019/09/09 7:15 p.m.•33 views

Information disclosure

An issue was discovered in GitLab Community and Enterprise Edition 8.x, 9.x, 10.x, and 11.x before 11.8.9, 11.9.x before 11.9.10, and 11.10.x before 11.10.2. It allows Information Disclosure. Non-member users who subscribe to notifications of an internal project with issue and repository...

4CVSS4.5AI score0.01044EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder