Lucene search
+L

10 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 1:57 p.m.•30 views

Malicious code in constructor-blocks-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96701ff9ef8e8d7ed9b946a9cb3cc7efa18a6159a1729610892fb95dc6175c31 On require of constructor-blocks-common, index.js loads helpers.js which invokes a bootstrap routine at module load. The routine reconstructs...

6.4AI score
SaveExploits0References1
osv_mini
osv_mini
•added 2026/06/22 11:30 a.m.•45 views

MINI-C7PH-3H6R-38M5

Bulletin has no description...

7.5CVSS6.2AI score0.00525EPSS
SaveExploits1
osv_mini
osv_mini
•added 2026/06/15 6:46 p.m.•17 views

MINI-2G23-W2GG-37MW

Bulletin has no description...

9.1CVSS6AI score0.00683EPSS
SaveExploits0
osv_mini
osv_mini
•added 2026/03/13 7:57 a.m.•14 views

MINI-GR34-GG4Q-8P8R

Bulletin has no description...

6.1CVSS7AI score0.00374EPSS
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2019-9229

Malware in sbrugna...

4.8CVSS5.4AI score0.00557EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/07/13 12:00 a.m.•8 views

CVE-2024-58258

SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur...

7.2CVSS5.9AI score0.2238EPSS
SaveExploits3References1
CVE
CVE
•added 2025/07/13 12:00 a.m.•67 views

CVE-2024-58258

SugarCRM has a code injection flaw (CVE-2024-58258) in versions before 13.0.4 and 14.x before 14.0.1. The vulnerability arises from improper sanitization of user-supplied GET parameters in the /css/preview API, which is parsed as LESS and can be abused via @import to trigger SSRF and local file d...

7.2CVSS5.9AI score0.2238EPSS
SaveExploits3References2
CNVD
CNVD
•added 2025/02/25 12:00 a.m.•30 views

Linux kernel null pointer dereference vulnerability (CNVD-2025-04164)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a null pointer dereference vulnerability that stems from a DLM module that may cause a null pointer dereference to lkbresource when requestlock is...

5.5CVSS6.7AI score0.00242EPSS
SaveExploits0References1
CVE
CVE
•added 2020/08/21 5:15 p.m.•118 views

CVE-2020-15147

CVE-2020-15147 affects Red Discord Bot prior to versions 3.3.12 and 3.4, where the Streams module is vulnerable to remote code execution via crafted going-live messages. The underlying issue allows an attacker (Discord user) to inject code into the Streams going-live message, enabling destructive...

8.5CVSS8.6AI score0.02614EPSS
SaveExploits0References3Affected Software1
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•51 views

CylantSecure 1.0 Kernel Module Syscall Rerouting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2958/info CylantSecure is a commercial Linux hardening tool and security infrastructure available from Cylant Technology. A problem in the CylantSecure infrastructure could allow users to escape monitoring. A user with ro...

7.1AI score
SaveExploits0
Rows per page
Query Builder