Lucene search
+L

234625 matches found

OSV
OSV
added 2026/04/16 9:43 a.m.16 views

MAL-2026-2724 Malicious code in agdebugger-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be34269bebfc9203228b56604d750ac51bdf4f84cbf58141d3317fc45c8854ad The package agdebugger-frontend was found to contain malicious code...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:42 a.m.13 views

Malicious code in actions-label-commenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0834799a232c7e018eda35f3042f85750f8155d2ec47e2f935389be689671cf The package actions-label-commenter was found to contain malicious code...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/04/16 9:42 a.m.11 views

MAL-2026-2723 Malicious code in actions-label-commenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0834799a232c7e018eda35f3042f85750f8155d2ec47e2f935389be689671cf The package actions-label-commenter was found to contain malicious code...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:42 a.m.16 views

Malicious code in aca-review-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4019ca27647236621668ae5e45dd104c23d60ad5b64fd5179ad09efda40cc345 The package aca-review-apps was found to contain malicious code...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/04/16 9:42 a.m.11 views

MAL-2026-2720 Malicious code in aca-review-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4019ca27647236621668ae5e45dd104c23d60ad5b64fd5179ad09efda40cc345 The package aca-review-apps was found to contain malicious code...

5.7AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/16 9:39 a.m.10 views

CVE-2024-8010 XML External Entity Injection via Publisher in WSO2 API Manager Allows Reading Arbitrary Files

The component accepts XML input through the publisher without disabling external entity resolution. This allows malicious actors to submit a crafted XML payload that exploits the unescaped external entity references. By leveraging this vulnerability, a malicious actor can read confidential files...

3.5CVSS5.8AI score0.00273EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/16 9:39 a.m.10 views

MAL-2026-2717 Malicious code in @tax-taxdev/tools-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37c3192cab77322b1ecf1742c4eda9aa9e5a6b495e3bf386284a15cf36365dcc The package @tax-taxdev/tools-scripts was found to contain malicious code...

5.7AI score
SaveExploits0
OSV
OSV
added 2026/04/16 9:34 a.m.13 views

MAL-2026-2713 Malicious code in @fuego-tools/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b13e975286ea5f50f12e176e5b9399e209b890fc03e8d5f890f02d83a52489 The package @fuego-tools/analytics was found to contain malicious code...

5.7AI score
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/04/16 9:32 a.m.6 views

CVE-2024-4867 Cross-Site Scripting via Developer Portal in WSO2 API Manager Enables UI Modification and Information Retrieval

The WSO2 API Manager developer portal accepts user-supplied input without enforcing expected validation constraints or proper output encoding. This deficiency allows a malicious actor to inject script content that is executed within the context of a user's browser. By leveraging this cross-site...

5.4CVSS5.7AI score0.00195EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/04/16 9:32 a.m.36 views

CVE-2024-4867 Cross-Site Scripting via Developer Portal in WSO2 API Manager Enables UI Modification and Information Retrieval

The WSO2 API Manager developer portal accepts user-supplied input without enforcing expected validation constraints or proper output encoding. This deficiency allows a malicious actor to inject script content that is executed within the context of a user's browser. By leveraging this cross-site...

5.4CVSS0.00195EPSS
SaveExploits0References1
CVE
CVE
added 2026/04/16 9:32 a.m.24 views

CVE-2024-4867

The CVE-2024-4867 entry describes a cross-site scripting (XSS) vulnerability in the WSO2 API Manager developer portal. User-supplied input is not properly validated or output-encoded, enabling injection of script content executed in the user’s browser. Exploitation can cause the UI to redirect to...

5.4CVSS5.7AI score0.00195EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/04/16 9:31 a.m.13 views

EUVD-2026-23217

Dell Storage Manager - Replay Manager for Microsoft Servers, versions 8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.8AI score0.00122EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/04/16 9:28 a.m.12 views

Malicious code in @3stripes/toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4529c8ef3e0953799338bc7e0cc7d6ce4f1d8797b3e0984d362ebd26df6bec1c The package @3stripes/toolkit was found to contain malicious code...

5.7AI score
SaveExploits0References1
OSV
OSV
added 2026/04/16 9:28 a.m.10 views

MAL-2026-2703 Malicious code in @3stripes/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31ba4725ff03b9b0a4645734fca9af46fbd145e147f7fb7ee0942853c425f53f The package @3stripes/components was found to contain malicious code...

5.7AI score
SaveExploits0References1
NVD
NVD
added 2026/04/16 9:16 a.m.19 views

CVE-2026-23772

Dell Storage Manager - Replay Manager for Microsoft Servers, versions 8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS0.00122EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/04/16 9:08 a.m.11 views

SUSE CVE-2005-3655

Heap-based buffer overflow in Novell Open Enterprise Server Remote Manager novell-nrm in Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter...

7.5CVSS6.5AI score0.05715EPSS
SaveExploits1References4
OSV
OSV
added 2026/04/16 9:06 a.m.13 views

OPENSUSE-SU-2026:20547-1 Security update for strongswan

This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP bsc1259472. Changes for strongswan: - Fixed a vulnerability in the NetworkManager plugin that...

8.7CVSS5.7AI score0.01013EPSS
SaveExploits2References4
OSV
OSV
added 2026/04/16 9:05 a.m.5 views

SUSE-SU-2026:21203-1 Security update for strongswan

This update for strongswan fixes the following issues: Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When Handling EAP-TTLS AVP bsc1259472. Changes for strongswan: - Fixed a vulnerability in the NetworkManager plugin that...

8.7CVSS5.9AI score0.01013EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2026/04/16 8:30 a.m.41 views

CVE-2026-23772

Dell Storage Manager - Replay Manager for Microsoft Servers, versions 8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS0.00122EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/04/16 8:30 a.m.11 views

CVE-2026-23772

Dell Storage Manager - Replay Manager for Microsoft Servers, versions 8.0, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.3CVSS5.8AI score0.00122EPSS
SaveExploits0References1
Rows per page
Query Builder