Lucene search
+L

154 matches found

ALT Linux
ALT Linux
•added 2020/11/16 12:00 a.m.•45 views

Security fix for the ALT Linux 10 package node version 14.15.1-alt1

Nov. 16, 2020 Vitaly Lipatov 14.15.1-alt1 - new version 14.15.1 with rpmrb script - set c-ares = 1.16.1-alt2 - CVE-2020-8277: Denial of Service through DNS request High...

5CVSS7.2AI score0.54164EPSS
SaveExploits0
ALT Linux
ALT Linux
•added 2020/09/16 12:00 a.m.•70 views

Security fix for the ALT Linux 10 package node version 14.11.0-alt1

Sept. 16, 2020 Vitaly Lipatov 14.11.0-alt1 - new version 14.11.0 with rpmrb script - CVE-2020-8251: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests Critical - CVE-2020-8201: HTTP Request Smuggling due to CR-to-Hyphen conversion High...

5.8CVSS7.7AI score0.08358EPSS
SaveExploits0
OSV
OSV
•added 2020/09/11 9:10 p.m.•20 views

GHSA-MVCH-RH6H-2M47 Malicious Package in equest

All versions of equest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/11 9:09 p.m.•33 views

Malicious Package in reuest

All versions of reuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

3.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/11 9:08 p.m.•22 views

Malicious Package in requst

All versions of requst typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

3.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2020/09/02 9:30 p.m.•42 views

Malicious Package in saync

All versions of saync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

3.6AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 9:29 p.m.•16 views

GHSA-HG5Q-RJ62-C43G Malicious Package in reqest

All versions of reqest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 9:16 p.m.•29 views

Malicious Package in erquest

All versions of erquest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 9:15 p.m.•20 views

GHSA-PJ97-J597-PPM7 Malicious Package in rqeuest

All versions of rqeuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 9:15 p.m.•34 views

Malicious Package in rqeuest

All versions of rqeuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

4AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 9:14 p.m.•17 views

GHSA-W7WG-24G3-2C78 Malicious Package in requset

All versions of requset typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

9.8CVSS6.8AI score
SaveExploits0References1
OSV
OSV
•added 2020/09/02 9:13 p.m.•19 views

GHSA-F3PC-C2GF-HVGW Malicious Package in requets

All versions of requets typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process w...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 8:32 p.m.•34 views

Malicious Package in rrequest

All versions of rrequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

3.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 8:32 p.m.•16 views

GHSA-WC7Q-QPM4-8PQV Malicious Package in rrequest

All versions of rrequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

9.8CVSS6.8AI score
SaveExploits0References1
OSV
OSV
•added 2020/09/02 8:31 p.m.•14 views

GHSA-G8JC-MM3C-CWHJ Malicious Package in reques

All versions of reques typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 8:31 p.m.•31 views

Malicious Package in reques

All versions of reques typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process wa...

3.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 8:30 p.m.•21 views

GHSA-RW4R-H883-8PF9 Malicious Package in reequest

All versions of reequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

9.8CVSS6.8AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2020/09/02 8:28 p.m.•29 views

Malicious Package in reqquest

All versions of reqquest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

3.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/09/02 8:28 p.m.•18 views

GHSA-4JFQ-Q299-G4CR Malicious Package in reqquest

All versions of reqquest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

9.8CVSS6.8AI score
SaveExploits0References1
OSV
OSV
•added 2020/09/02 8:27 p.m.•24 views

GHSA-FRXQ-V7FM-M4PV Malicious Package in requuest

All versions of requuest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

9.8CVSS6.8AI score
SaveExploits0References1
Rows per page
Query Builder