Lucene search
K

19 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/27 4:47 p.m.1 views

Malicious code in metamask-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d741c998a924aa720c19f13cbb622ebb5862abde8765dac7f8bb2cf1b219c3dc Clones of legitimate libraries with malicious modifications intended to download malicious remote code. The remote script allows executing arbitrary files...

6AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:41 a.m.5 views

CVE-1999-0184

When compiled with the -DALLOWUPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records...

6.4CVSS7AI score0.01208EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-12705

Malware in sbrugna...

3.9CVSS4.8AI score0.00012EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-14877

Malware in sbrugna...

4.9CVSS5.2AI score0.00063EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-39916

Malicious code in bioql PyPI...

8.1CVSS7.8AI score0.00221EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/22 10:30 a.m.7 views

CVE-2019-5272

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection...

4.9CVSS6.8AI score0.00063EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2024/06/26 8:37 a.m.32 views

New Credit Card Skimmer Targets WordPress, Magento, and OpenCart Sites

Multiple content management system CMS platforms like WordPress, Magento, and OpenCart have been targeted by a new credit card web skimmer called Caesar Cipher Skimmer. A web skimmer refers to malware that is injected into e-commerce sites with the goal of stealing financial and payment...

7.4AI score
Exploits0
OSV
OSV
added 2024/03/06 11:16 a.m.18 views

BIT-TENSORFLOW-2021-41203 Missing validation during checkpoint loading

TensorFlow is an open source platform for machine learning. In affected versions an attacker can trigger undefined behavior, integer overflows, segfaults and CHECK-fail crashes if they can change saved checkpoints from outside of TensorFlow. This is because the checkpoints loading infrastructure ...

7.8CVSS7.6AI score0.00019EPSS
Exploits0References6
CNVD
CNVD
added 2023/08/12 12:0 a.m.18 views

Huawei HarmonyOS Security Restriction Bypass Vulnerability (CNVD-2023-70289)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security restriction bypass vulnerability that stems from the use of insecure signatures in the ServiceWifiResources module,...

7.5CVSS6.7AI score0.00034EPSS
Exploits0References1
CNVD
CNVD
added 2023/08/12 12:0 a.m.30 views

Huawei HarmonyOS Security Restriction Bypass Vulnerability (CNVD-2023-70288)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security restriction bypass vulnerability that stems from the use of insecure signatures in the osulogin module, which can be...

7.5CVSS6.7AI score0.00034EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/10/17 9:16 p.m.12 views

CVE-2020-8974 ZGR TPS200 NG Missing Reference to Active Allocated Resource

In ZGR TPS200 NG 2.00 firmware version and 1.01 hardware version, the firmware upload process does not perform any type of restriction. This allows an attacker to modify it and re-upload it via web with malicious modifications, rendering the device unusable...

10CVSS9.5AI score0.00334EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/10/14 12:0 a.m.7 views

CVE-2022-41576

The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices...

7.5AI score0.00113EPSS
Exploits0References2
CNVD
CNVD
added 2020/03/23 12:0 a.m.0 views

Unspecified vulnerability in multiple Huawei products (CNVD-2020-21997)

The Huawei HEGE-570, among others, is a smart screen device from the Chinese company Huawei Huawei. A security vulnerability exists in several Huawei products, which can be exploited by attackers with elevated privileges to make malicious modifications...

3.9CVSS6.7AI score0.00012EPSS
Exploits0References1
NVD
NVD
added 2020/03/20 4:15 p.m.11 views

CVE-2020-1879

There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions...

3.9CVSS4.2AI score0.00012EPSS
Exploits0References2
Prion
Prion
added 2020/03/20 4:15 p.m.14 views

Input validation

There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions...

3.6CVSS4.3AI score0.00012EPSS
Exploits0References2Affected Software6
CVE
CVE
added 2020/03/20 3:2 p.m.90 views

CVE-2020-1879

Summary: CVE-2020-1879 describes an improper integrity-check vulnerability in several Huawei smart devices that can let a high-privilege attacker perform malicious modifications. Affected products/versions: HEGE-560 v1.0.1.21(SP3); HEGE-570 v1.0.1.22(SP3); OSCA-550 v1.0.1.21(SP3); OSCA-550A v1.0....

3.9CVSS4.3AI score0.00012EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2019/12/26 7:15 p.m.13 views

CVE-2019-5272

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection...

4.9CVSS5AI score0.00063EPSS
Exploits0References1
Prion
Prion
added 2019/12/26 7:15 p.m.15 views

Design/Logic Flaw

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection...

4CVSS4.9AI score0.00063EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/26 6:30 p.m.17 views

CVE-2019-5272

USG9500 with versions of V500R001C30;V500R001C60 have a missing integrity checking vulnerability. The software of the affected products does not check the integrity which may allow an attacker with high privilege to make malicious modifications without detection...

5AI score0.00063EPSS
Exploits0References1
Rows per page
Query Builder