Lucene search
K

6 matches found

OSV
OSV
added 2026/05/20 2:32 a.m.4 views

MAL-2026-4702 Malicious code in vestibulect (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82da0f0bb40f42e69defbea694db093f2ad880c8c094508f61e2d7fe58550e2e package.json declares a postinstall hook "postinstall": "node install.js" which executes install.js automatically on npm install. install.js imports ...

5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/28 6:4 p.m.0 views

CVE-2025-31971 AIML Solutions for HCL SX is susceptible to a URL validation vulnerability

AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery SSRF attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information...

5.1CVSS6.3AI score0.00024EPSS
Exploits0References1
Veracode
Veracode
added 2025/07/28 4:40 a.m.2 views

Server-Side Request Forgery (SSRF)

Apache Ranger is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper input validation due to the Edit Service Page in the UI allowing crafted requests that can trigger unintended internal or external network calls...

9.1CVSS6.2AI score0.00286EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.1 views

PT-2023-4986 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in access control, allowing a remote attacker to execute arbitrary code in the context of the server account by making a network call. This...

8CVSS9.6AI score0.00296EPSS
Exploits0References10
Tenable Nessus
Tenable Nessus
added 2016/04/13 12:0 a.m.1123 views

Samba Badlock Vulnerability

The version of Samba, a CIFS/SMB server for Linux and Unix, running on the remote host is affected by a flaw, known as Badlock, that exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD protocols due to improper authentication level negotiation over Remote...

7.5CVSS7.1AI score0.78522EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2009/10/28 12:0 a.m.16 views

Asterisk Missing ACL Check Remote Security Bypass Vulnerability (AST-2009-007)

Asterisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

7.4AI score
Exploits0References4
Rows per page
Query Builder