Lucene search
K

39 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/25 1:48 p.m.12 views

Malicious code in itc-actors-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22687e1f7601dde1753d3775925d62d040892631394937e56e9b9fba74fb85c6 The package contains callback.js which collects host identifiers and user information os.hostname, os.userInfo, os.platform, cwd and transmits them v...

5.8AI score
Exploits0References1
OSV
OSV
added 2026/05/25 1:48 p.m.4 views

MAL-2026-4589 Malicious code in itc-actors-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22687e1f7601dde1753d3775925d62d040892631394937e56e9b9fba74fb85c6 The package contains callback.js which collects host identifiers and user information os.hostname, os.userInfo, os.platform, cwd and transmits them v...

5.8AI score
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-11983

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00263EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/04/26 9:11 a.m.21 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

6.5CVSS8.3AI score0.00263EPSS
Exploits0References1
NVD
NVD
added 2025/04/24 9:15 p.m.29 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

6.5CVSS0.00263EPSS
Exploits0References2
OSV
OSV
added 2025/04/24 9:15 p.m.19 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

6.5CVSS8.2AI score0.00263EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/24 12:0 a.m.1 views

ITC Systems Multiplan/Matrix OneCard platform 安全漏洞

ITC Systems Multiplan/Matrix OneCard platform is a campus or institutional card management platform from ITC Systems. A security vulnerability exists in ITC Systems Multiplan/Matrix OneCard platform version 3.7.4.1002, which originates from a SQL injection vulnerability in the Forgotpassword.aspx...

6.5CVSS7.8AI score0.00263EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/04/24 12:0 a.m.5 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

7.9AI score0.00263EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/04/24 12:0 a.m.5 views

PT-2025-17858 · Itc Systems · Itc Systems Multiplan/Matrix Onecard

Name of the Vulnerable Software and Affected Versions: ITC Systems Multiplan/Matrix OneCard platform version 3.7.4.1002 Description: The issue is related to a SQL injection vulnerability. It affects the Forgotpassword.aspx component. Recommendations: For version 3.7.4.1002, consider restricting...

6.5CVSS7.2AI score0.00263EPSS
Exploits0References7
CVE
CVE
added 2025/04/24 12:0 a.m.67 views

CVE-2025-29529

CVE-2025-29529 relates to SQL injection in ITC Systems Multiplan/Matrix OneCard platform, specifically in Forgotpassword.aspx of version 3.7.4.1002. The vulnerability arises from a flaw in the Forgotpassword.aspx component that enables SQL injection. Affected product is ITC Systems Multiplan/Matr...

6.5CVSS7.9AI score0.00263EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/04/24 12:0 a.m.29 views

CVE-2025-29529

ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx...

0.00263EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/31 12:0 a.m.5 views

The vulnerability of the itc_hash_compare component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.

The vulnerability of the itchashcompare component in the Virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability can allow an attacker to cause a service failure by sending specially...

7.8CVSS7.3AI score0.00551EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2025/01/14 1:15 a.m.11 views

CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.3AI score
Exploits0References1
OSV
OSV
added 2025/01/14 1:15 a.m.1 views

DEBIAN-CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00551EPSS
Exploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.1 views

DEBIAN-CVE-2024-57636

An issue in the itcsamplerowcheck component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS7.5AI score0.00845EPSS
Exploits1References1
OSV
OSV
added 2025/01/14 1:15 a.m.3 views

UBUNTU-CVE-2024-57644

An issue in the itchashcompare component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

7.5CVSS5.9AI score0.00551EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/01/14 12:0 a.m.22 views

CVE-2024-57648

An issue in the itcsetparamrow component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...

0.0088EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

Virtuoso Open-Source Edition SQL注入漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. An SQL injection vulnerability exists in Virtuoso Open-Source Edition version v7.2.11,...

7.5CVSS7.7AI score0.00845EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

OpenLink Virtuoso-opensource 安全漏洞

OpenLink Virtuoso-opensource is OpenLink Software's is a powerful multi-model database and middleware platform for a variety of application scenarios that require high-performance data processing and complex data model support. A security vulnerability exists in OpenLink Virtuoso-opensource versi...

7.5CVSS7.5AI score0.0088EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.3 views

Virtuoso Open-Source Edition 安全漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

7.5CVSS7.5AI score0.00551EPSS
Exploits1References2
Rows per page
Query Builder