Lucene search
+L

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/31 11:46 p.m.•27 views

Malicious code in metrics-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a5f1c46b3dedff62a0fbbb97026f6ad0b4c59cbbfb5f3078de824328c09b8c metrics-ui is a functionally empty npm package hollow index.js, no scripts whose only effect on installers is pulling in a runtime dependency resolve...

5.7AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2026/07/31 11:46 p.m.•17 views

MAL-2026-11473 Malicious code in metrics-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a5f1c46b3dedff62a0fbbb97026f6ad0b4c59cbbfb5f3078de824328c09b8c metrics-ui is a functionally empty npm package hollow index.js, no scripts whose only effect on installers is pulling in a runtime dependency resolve...

5.7AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/07/31 11:46 p.m.•15 views

Malicious Package

Overview metrics-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.5AI score
SaveExploits0References2
Mend
Mend
•added 2023/01/07 11:31 a.m.•7 views

CVE-2015-10023

A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...

9.8CVSS0.00687EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/07 12:00 a.m.•17 views

PT-2023-10202 · Unknown · Fumon Trello-Octometric

Name of the Vulnerable Software and Affected Versions: Fumon trello-octometric affected versions not specified Description: A critical issue has been found in Fumon trello-octometric, affecting the main function of the file metrics-ui/server/srv.go. The manipulation of the num argument leads to s...

9.8CVSS6.3AI score0.00687EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/07 12:00 a.m.•5 views

CVE-2015-10023: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The manipulation of the argument num leads to sql injection. The patch is named a1f1754933fbf21e2221fbc671c81a47de6a04ef. It is recommended to app...

9.8CVSS5.3AI score0.00687EPSS
SaveExploits0References2
Mend
Mend
•added 2022/08/25 7:36 p.m.•8 views

CVE-2021-3914

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

6.1CVSS0.00523EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•7 views

CVE-2021-3914: Improper Neutralization of Input During Web Page Generation

It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks...

6.1CVSS6.2AI score0.00523EPSS
SaveExploits0References3
Rows per page
Query Builder