Lucene search
+L

1454 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:18 p.m.4 views

Malicious code in apple-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/03 1:15 p.m.3 views

Malicious code in airbnb-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/03/03 1:15 p.m.3 views

MAL-2025-1715 Malicious code in airbnb-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Snyk
Snyk
added 2025/03/01 6:39 a.m.22 views

Race Condition

Overview ray is an A system for parallel and distributed Python that unifies the ML ecosystem. Affected versions of this package are vulnerable to Race Condition in multi-threaded environments, attackers exploiting concurrent access can trigger unexpected behavior in MetricsLogger methods,...

8.8CVSS6.9AI score
SaveExploits0References3
SUSE Linux
SUSE Linux
added 2025/02/14 7:19 a.m.8 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Build all python bindings for all flavors Fixed the condition of alternatives for Tumbleweed and Leap 16 Handle logger exception when flushing already closed file Included passlib as a recommended dependency Make minion reconnecting on changing master...

5.7CVSS7.6AI score0.00172EPSS
SaveExploits0References40
SUSE Linux
SUSE Linux
added 2025/02/13 8:40 a.m.4 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Revert setting SELinux context for minion service bsc1233667 Removed System V init support Fix the condition of alternatives for Tumbleweed and Leap 16 Build all python bindings for all flavors Make minion reconnecting on changing master IP bsc1228182...

5.7CVSS7.5AI score0.00172EPSS
SaveExploits0References38
SUSE Linux
SUSE Linux
added 2025/02/13 8:38 a.m.3 views

Security update for SUSE Manager Client Tools

This update fixes the following issues: salt: Revert setting SELinux context for minion service bsc1233667 Removed System V init support Fix the condition of alternatives for Tumbleweed and Leap 16 Build all python bindings for all flavors Make minion reconnecting on changing master IP bsc1228182...

5.7CVSS7.5AI score0.00172EPSS
SaveExploits0References38
Snyk
Snyk
added 2025/02/12 7:18 p.m.8 views

Improper Output Neutralization for Logs

Overview rack is a minimal, modular and adaptable interface for developing web applications in Ruby. By wrapping HTTP requests and responses in the simplest way possible, it unifies and distills the API for web servers, web frameworks, and software in between the so-called middleware into a singl...

7.1CVSS6.8AI score0.01162EPSS
SaveExploits1References3
OSV
OSV
added 2025/02/12 5:15 p.m.15 views

UBUNTU-CVE-2025-25184

Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious conten...

7.1CVSS6.7AI score0.01162EPSS
SaveExploits1References5
Veracode
Veracode
added 2025/02/10 2:39 a.m.11 views

Prototype Pollution

eazy-logger is vulnerable to prototype pollution. The vulnerability is due to prototype pollution caused by the lib.Logger function allowing attackers to supply a crafted payload, leading to a Denial of Service DoS...

7.5CVSS7.4AI score0.00562EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/08 4:29 a.m.11 views

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.5AI score0.00562EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/06 6:31 a.m.11 views

GHSA-R7JX-5M6M-CPG9 eazy-logger prototype pollution

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing deni...

7.5CVSS7.5AI score0.00562EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2025/02/06 6:31 a.m.15 views

eazy-logger prototype pollution

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing deni...

7.5CVSS8AI score0.00562EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2025/02/05 10:15 p.m.15 views

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS0.00562EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/02/05 9:41 p.m.5 views

Prototype Pollution

Overview org.webjars.npm:eazy-logger is a Simple cli logger Affected versions of this package are vulnerable to Prototype Pollution in the Logger function. Details Prototype Pollution is a vulnerability affecting JavaScript. Prototype Pollution refers to the ability to inject properties into...

7.5CVSS8AI score0.00562EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/02/05 12:07 a.m.12 views

CVE-2024-4190

Stored Cross-Site Scripting XSS vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited...

8.4CVSS6.1AI score0.00349EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/05 12:00 a.m.566 views

CVE-2024-57075

CVE-2024-57075 affects eazy-logger v4.0.1: prototype pollution in the lib.Logger function can load a crafted payload to modify Object.prototype, enabling denial of service (DoS). Public docs include a PoC that injects into the global prototype chain (e.g., via proto ), with outcomes ranging from ...

7.5CVSS6.8AI score0.00562EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/05 12:00 a.m.7 views

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.4AI score0.00562EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/05 12:00 a.m.17 views

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

0.00562EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/02/05 12:00 a.m.10 views

eazy-logger 安全漏洞

eazy-logger is a simple cli logger by Shane Osbourne Personal Developer. A security vulnerability exists in eazy-logger version v4.0.1, which stems from the lib.Logger function containing a prototype contamination vulnerability...

7.5CVSS6.5AI score0.00562EPSS
SaveExploits0References1
Rows per page
Query Builder