Lucene search
+L

108 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/01 7:15 p.m.•29 views

Malicious code in vitest-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0165cbb3d6ed37a96889c4b016463706346e1c09413635c31ea1ceedde8774 The package's postinstall script node lib/utils/index.js spawns a detached, stdio-suppressed Node child process that runs...

5.9AI score
SaveExploits0References4
OSV
OSV
•added 2026/06/18 7:51 a.m.•16 views

OPENSUSE-SU-2026:21137-1 Security update for perl-Crypt-PasswdMD5

This update for perl-Crypt-PasswdMD5 fixes the following issues: Changes in perl-Crypt-PasswdMD5: - updated to 1.430.0 1.43 see /usr/share/doc/packages/perl-Crypt-PasswdMD5/Changelog.ini V 1.43 Date=2026-05-23T08:14:00 Deploy.Action=Upgrade Deploy.Reason=Security Comments= EOT - Accept pull reque...

7.5CVSS5.8AI score0.00508EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/16 9:31 p.m.•17 views

EUVD-2026-37139

An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0...

8.6CVSS5.8AI score0.00324EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/16 12:00 a.m.•2 views

CVE-2026-10748: Deserialization of Untrusted Data

An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user in Sonatype Nexus Repository 3 versions before 3.92.0...

8.6CVSS6.2AI score0.00324EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/09 12:00 a.m.•1 views

CVE-2026-36726: Improper Limitation of a Pathname to a Restricted Directory

An arbitrary file deletion vulnerability in the /api/delete-temp-license/file endpoint of bookcars v8.3 allows unauthenticated attackers to delete arbitrary files via supplying directory traversal sequences...

5.3CVSS6AI score0.00689EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:42 a.m.•16 views

CVE-2022-26973

Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details...

5.3CVSS7AI score0.00773EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/10 7:17 p.m.•21 views

CVE-2025-27054

Memory corruption while processing a malformed license file during reboot...

7.8CVSS7.1AI score0.00087EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/09 4:16 a.m.•18 views

CVE-2025-27054

Memory corruption while processing a malformed license file during reboot...

7.8CVSS0.00087EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/09 3:18 a.m.•15 views

EUVD-2025-33247

Memory corruption while processing a malformed license file during reboot...

7.8CVSS6.6AI score0.00087EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/09 3:18 a.m.•24 views

CVE-2025-27054 Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot...

7.8CVSS0.00087EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/09 3:18 a.m.•33 views

CVE-2025-27054

CVE-2025-27054 is a memory corruption issue reported in Qualcomm closed‑source components, triggered while processing a malformed license file during reboot. The CVE appears in multiple feeds (NVD/Red Hat/CVE.org), with Qualcomm listing a High severity for the affected closed‑source component. Co...

7.8CVSS6.7AI score0.00087EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/09 3:18 a.m.•7 views

CVE-2025-27054 Out-of-bounds Write in Display

Memory corruption while processing a malformed license file during reboot...

7.8CVSS6.7AI score0.00087EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/09 12:00 a.m.•1 views

CVE-2025-27054: Out-of-bounds Write

Memory corruption while processing a malformed license file during reboot...

7.8CVSS6AI score0.00087EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/09 12:00 a.m.•15 views

PT-2025-41343

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-27054 Description A memory corruption issue exists when processing a malformed license file during reboot. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

7.8CVSS6.5AI score0.00087EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2020-6649

Malware in sbrugna...

7.5CVSS7.4AI score0.01562EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2020-6651

Malware in sbrugna...

7.5CVSS7.4AI score0.00838EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-6655

Malware in sbrugna...

7.5CVSS7.4AI score0.00637EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-8299

Malware in sbrugna...

5.5CVSS5.5AI score0.00207EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2023-54401

Malicious code in bioql PyPI...

6.5CVSS4.9AI score0.01302EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-22428

Malicious code in bioql PyPI...

4.3CVSS6.6AI score0.00458EPSS
SaveExploits0References5
Rows per page
Query Builder