Lucene search
+L

154 matches found

OSV
OSV
•added 2020/09/02 6:33 p.m.•24 views

GHSA-87QW-7V97-W34R Malicious Package in asinc

All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:33 p.m.•35 views

Malicious Package in asinc

All versions of asinc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 6:31 p.m.•18 views

GHSA-RGGQ-F2WF-M6CP Malicious Package in jajajejejiji

All versions of jajajejejiji typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:31 p.m.•41 views

Malicious Package in jajajejejiji

All versions of jajajejejiji typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

4AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/02 6:30 p.m.•32 views

Malicious Package in 4equest

All versions of 4equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

3.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 6:30 p.m.•26 views

GHSA-P33Q-W45H-2HCJ Malicious Package in 4equest

All versions of 4equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

9.8CVSS6.8AI score
SaveExploits0References1
ALT Linux
ALT Linux
•added 2020/06/19 12:00 a.m.•59 views

Security fix for the ALT Linux 10 package node version 14.4.0-alt1

June 19, 2020 Vitaly Lipatov 14.4.0-alt1 - new version 14.4.0 with rpmrb script - set libicu = 6.5 - set libnghttp2 = 1.41.0 - CVE-2020-8172, CVE-2020-11080, CVE-2020-8174...

9.3CVSS6.8AI score0.07646EPSS
SaveExploits2
Cvelist
Cvelist
•added 2020/06/15 7:08 p.m.•47 views

CVE-2020-12019

WebAccess Node Version 8.4.4 and prior is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code...

9.7AI score0.02169EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/08 2:15 p.m.•29 views

CVE-2020-8172

TLS session reuse can lead to host certificate verification bypass in node version 12.18.0 and 14.4.0...

7.4CVSS7.5AI score0.06065EPSS
SaveExploits1References9
ALT Linux
ALT Linux
•added 2020/02/11 12:00 a.m.•47 views

Security fix for the ALT Linux 10 package node version 13.8.0-alt1

Feb. 11, 2020 Vitaly Lipatov 13.8.0-alt1 - new version 13.8.0 with rpmrb script - CVE-2019-15606, CVE-2019-15605, CVE-2019-15604...

7.5CVSS7.6AI score0.57132EPSS
SaveExploits2
nodejs
nodejs
•added 2019/05/30 7:08 p.m.•25 views

Malicious Package

Overview All versions of reqest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:23 p.m.•20 views

Malicious Package

Overview All versions of erquest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:22 p.m.•21 views

Malicious Package

Overview All versions of rqeuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:20 p.m.•19 views

Malicious Package

Overview All versions of requets typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:18 p.m.•25 views

Malicious Package

Overview All versions of reuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:18 p.m.•19 views

Malicious Package

Overview All versions of requst typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:15 p.m.•26 views

Malicious Package

Overview All versions of reqquest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:13 p.m.•21 views

Malicious Package

Overview All versions of requuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:10 p.m.•20 views

Malicious Package

Overview All versions of chak typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
nodejs
nodejs
•added 2019/05/06 2:10 p.m.•21 views

Malicious Package

Overview All versions of eact typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...

6.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder