Lucene search
+L

6835 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:21 p.m.6 views

Malicious code in superapp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8661287acb0d1449413e363c682ab1d8cc1815d42b6c36e957f78dfeb8d4e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:21 p.m.9 views

MAL-2022-836 Malicious code in activecore-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5ff9ff17056c993a7172ac1407d2cde49eb00d1dc3ab6d29dc0240fcc396ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:20 p.m.13 views

MAL-2022-619 Malicious code in @t15-ui-kit/enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 685b27cb36fa8e419b3fa2de15e0a9513372b1a662cc2f443a92caa0ae1eb500 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:20 p.m.5 views

Malicious code in @tochka-modules/t15-ui-kit-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 086e63c619a5b6887d4c00c37636d7366887829646ac38d2125202b4f5269d88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:19 p.m.13 views

MAL-2022-6864 Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:19 p.m.6 views

Malicious code in user-interface-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c5a0783b96928ab62b11cc5d3c6db94b32b6e990639a8727e1e0ae980d8caa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:18 p.m.6 views

Malicious code in rnx-kit-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ad390d0772ff1590bca749d5cab8846da9996e1933c13fc52ae4ef9bfde8d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:18 p.m.14 views

MAL-2022-5829 Malicious code in rnx-kit-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ad390d0772ff1590bca749d5cab8846da9996e1933c13fc52ae4ef9bfde8d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:18 p.m.9 views

MAL-2022-3826 Malicious code in ing-kit-ow-karma-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeb8d4a0c987464a036edcd47b9dd39357090c6cfe95c349319f346576bd80f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:18 p.m.9 views

MAL-2022-3825 Malicious code in ing-kit-dev-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f848b88df8633c5af2c7442a7c90bb78ed5eb5597fb28786966fe4cbc5f83e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:09 p.m.3 views

Malicious code in @cybernated/core-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583d74dfe9c810d3ddd6e71a070b7a29cea19002f5505e8cf0406110d7fc67cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:09 p.m.6 views

Malicious code in gd-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006efe3422350c297cf4e99ba62f060d3768219a2edfd93ba2de5a313e7f6325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:08 p.m.13 views

Malicious code in ui-extensions-server-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62c5c5dd9010448134993984fa17538a55c6ac68f350f4c9ba81c827f54645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:08 p.m.10 views

MAL-2022-6754 Malicious code in ui-extensions-server-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c62c5c5dd9010448134993984fa17538a55c6ac68f350f4c9ba81c827f54645a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 7:27 a.m.5 views

Malicious code in sdk-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8de66f690acbb62cee826234fc58f16d56e1adcedc66f23059dcef93e5b1f158 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:00 a.m.11 views

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK set is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure using the HTTP protocol...

7.8CVSS7.5AI score0.01142EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/14 12:00 a.m.12 views

PT-2022-2970 · Intel +9 · Sgx Psw +12

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to incomplete cleanup in specific special register write operations, which may allow an authenticated user to potentially enable information disclosure via...

9.8CVSS7.6AI score0.10458EPSS
SaveExploits104References1368
Vulnrichment
Vulnrichment
added 2022/06/13 1:45 p.m.13 views

CVE-2022-30310 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

9.8CVSS7.6AI score0.02549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/06/13 1:45 p.m.34 views

CVE-2022-30310 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-acknerr-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

9.8CVSS9.7AI score0.02549EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/06/13 1:45 p.m.36 views

CVE-2022-30308 FESTO: CECC-X-M1 and Servo Press Kit YJKP OS Command Injection vulnerability

In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection...

9.8CVSS9.7AI score0.02771EPSS
SaveExploits0References1
Rows per page
Query Builder