Lucene search
K

6 matches found

Cvelist
Cvelist
added 2026/01/05 9:43 p.m.39 views

CVE-2025-68428 jsPDF has Local File Inclusion/Path Traversal vulnerability

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loadFile method, a user can retrieve file...

9.2CVSS0.00024EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2026/01/05 9:43 p.m.3 views

CVE-2025-68428 jsPDF has Local File Inclusion/Path Traversal vulnerability

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loadFile method, a user can retrieve file...

9.2CVSS6.4AI score0.00024EPSS
Exploits2References3
EUVD
EUVD
added 2026/01/05 9:43 p.m.3 views

EUVD-2026-0847

jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allows local file inclusion/path traversal. If given the possibility to pass unsanitized paths to the loadFile method, a user can retrieve file...

9.2CVSS6.3AI score0.00024EPSS
Exploits2References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/04/29 1:25 a.m.3 views

Malicious code in donuts.node-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8d6fee5827de9688cc9b83812dc32e54e33531a0bd2fd179dc3e2935564dc7 The OpenSSF Package Analysis project identified 'donuts.node-build' @ 99.99.104 npm as malicious. It is considered malicious because: - The...

7.1AI score
Exploits0References1
Snyk
Snyk
added 2023/03/01 8:18 a.m.2 views

Malicious Package

Overview donuts.node-build is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

9.8CVSS7.1AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2014/11/08 12:0 a.m.54 views

RHEL 6 : rhev-hypervisor6 (RHSA-2012:1375)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1375 advisory. The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor...

7.8CVSS6.6AI score0.07001EPSS
Exploits1References9
Rows per page
Query Builder