117 matches found
MAL-2026-421 Malicious code in oce-freecoin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c125cdfc091d53c54e0022436529ccd264a1ed699efaa196c1de728dbaf7a33d The package oce-freecoin was found to contain malicious code. Source: ghsa-malware 30b088dd8ef3dacfac096c97dd240b3a2132a977ba03dc7dc95b2b2528b2e60b A...
MAL-2026-420 Malicious code in oce-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3bb1f0bc8596c323c58dd811956c6002337f6f9f660adb266b7b722880705d The package oce-components was found to contain malicious code. Source: ghsa-malware 01822c3aed2c0b5e7611959aab8ed47c7722edbc8cef5b339dd6413805eecdda...
CVE-2020-10671
The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a logged-in administrative user. NOTE: this is fixed in the latest version...
CVE-2020-10668
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp. The vulnerable parameter is openSI. NOTE: this is fixed in the latest version...
CVE-2020-10669
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthenticated attacker able to connect to the device's web interface can get a copy of the documents uploaded by any users. NOTE: this is fixed in the late...
CVE-2020-10670
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in the parameter settingId of the settingDialogContent.jsp page. NOTE: this is fixed in the latest version...
CVE-2025-20731
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege when OceReducedNeighborReport is disabled. User interaction is not needed for exploitation...
CVE-2025-20732
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege when OceReducedNeighborReport is disabled. User interaction is not needed for exploitation...
EUVD-2020-3114
Malware in sbrugna...
EUVD-2020-3112
Malware in sbrugna...
EUVD-2020-3115
Malware in sbrugna...
EUVD-2018-3847
Malware in sbrugna...
EUVD-2020-19055
Malware in sbrugna...
EUVD-2021-25729
Malware in sbrugna...
EUVD-2021-25728
Malware in sbrugna...
EUVD-2020-3113
Malware in sbrugna...
EUVD-2020-3111
Malware in sbrugna...
Malicious code in oce-login-enabler (npm)
The package oce-login-enabler was found to contain malicious code...